WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
schedule
Published
2025-03-17
Title
Schedule <= 1.0.0 - Unauthenticated SQL Injection
Slug
schedule-posts-calendar
Published
2023-09-06
Title
Schedule Posts Calendar < 5.3 - Admin+ Stored XSS
Slug
schedule-posts-calendar
Published
2023-10-06
Title
Schedule Posts Calendar < 5.3 - CSRF
Slug
scheduled
Published
2025-04-09
Title
Scheduled <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
scheduled-announcements-widget
Published
2023-03-20
Title
Scheduled Announcements Widget < 1.0 - Contributor+ Stored XSS
Slug
scheduled-notification-bar
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
scheduler-widget
Published
2026-02-13
Title
Scheduler Widget <= 0.1.6 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary Event Modification
Slug
schedulicity-online-appointment-booking
Published
2023-03-03
Title
Schedulicity - Easy Online Scheduling <= 2.21 - Contributor+ Stored XSS
Slug
schema-and-structured-data-for-wp
Published
2023-12-27
Title
Schema & Structured Data for WP & AMP < 1.24 - Contributor+ Stored XSS
Slug
schema-and-structured-data-for-wp
Published
2024-01-12
Title
Schema & Structured Data for WP & AMP < 1.26 - Contributor+ Stored Cross-Site Scripting
Slug
schema-and-structured-data-for-wp
Published
2024-02-19
Title
Schema & Structured Data for WP & AMP < 1.27 - Contributor+ reCaptcha Key Update
Slug
schema-and-structured-data-for-wp
Published
2024-02-19
Title
Schema & Structured Data for WP & AMP < 1.27 - Authenticated Stored XSS
Slug
schema-and-structured-data-for-wp
Published
2024-04-22
Title
Schema & Structured Data for WP & AMP < 1.30 - Authenticated (Contributor+) Stored Cross-Site Scripting via How To and FAQ Blocks
Slug
schema-and-structured-data-for-wp
Published
2024-07-16
Title
Schema & Structured Data for WP & AMP < 1.34.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via url Attribute
Slug
schema-and-structured-data-for-wp
Published
2024-10-21
Title
Schema & Structured Data for WP & AMP < 1.36 - Unauthenticated Sensitive Information Exposure
Slug
schema-and-structured-data-for-wp
Published
2025-09-10
Title
Schema & Structured Data for WP & AMP < 1.50 - Unauthenticated Stored-XSS
Slug
schema-and-structured-data-for-wp
Published
2025-10-31
Title
Schema & Structured Data for WP & AMP < 1.52 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
schema-and-structured-data-for-wp
Published
2026-01-22
Title
Schema & Structured Data for WP & AMP < 1.54.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via User Custom Schema
Slug
schema-app-structured-data-for-schemaorg
Published
2023-09-27
Title
Schema App Structured Data < 1.22.4 - Missing Authorization via page_init
Slug
schema-app-structured-data-for-schemaorg
Published
2024-05-23
Title
Schema App Structured Data < 2.2.1 - Missing Authorization
Slug
schema-app-structured-data-for-schemaorg
Published
2024-06-13
Title
Schema App Structured Data < 2.2.1 - Cross-Site Request Forgery
Slug
schema-app-structured-data-for-schemaorg
Published
2024-12-11
Title
Schema App Structured Data < 2.2.5 - Reflected Cross-Site Scripting
Slug
schema-scalpel
Published
2025-10-31
Title
Schema Scalpel < 1.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title in JSON-LD Schema
Slug
school-management
Published
2019-07-11
Title
School Management < 57.0 - CSRF and Stored XSS
Slug
school-management
Published
2024-11-22
Title
School Management < 92.0.0 - Authenticated (Student+) Arbitrary File Upload