CVE-2025-60119

CVE-2025-60119 : In CoSchedule for WordPress, an Unauthenticated Sensitive Information Exposure vulnerability affects CoSchedule up to version 3.3.11 (per Wordfence). The issue leaks sensitive data to unauthorized actors due to insufficient access control. Wordfence indicates a patch is available...

WordPress plugin CoSchedule 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

PT-2025-39566

Name of the Vulnerable Software and Affected Versions CoSchedule versions through 3.3.10 Description A flaw exists in CoSchedule that allows retrieval of embedded sensitive data, potentially exposing sensitive system information to an unauthorized control sphere. Recommendations Update CoSchedule...

CVE-2024-32806

Cross-Site Request Forgery CSRF vulnerability in CoSchedule Headline Analyzer.This issue affects Headline Analyzer: from n/a through 1.3.3...

CVE-2022-47165

Cross-Site Request Forgery CSRF vulnerability in CoSchedule plugin = 3.3.8 versions...

CVE-2023-46195

Missing Authorization vulnerability in CoSchedule Headline Analyzer headline-analyzer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Headline Analyzer: from n/a through = 1.3.1...

CVE-2024-32806

Cross-Site Request Forgery CSRF vulnerability in CoSchedule Headline Analyzer.This issue affects Headline Analyzer: from n/a through 1.3.3...

CVE-2024-32806

Technical details for CVE-2024-32806 are not publicly available in the provided documents. Monitor for updates.

CVE-2024-32806 WordPress Headline Analyzer plugin <= 1.3.3 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in CoSchedule Headline Analyzer.This issue affects Headline Analyzer: from n/a through 1.3.3...

CVE-2024-32806 WordPress Headline Analyzer plugin <= 1.3.3 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in CoSchedule Headline Analyzer.This issue affects Headline Analyzer: from n/a through 1.3.3...

CVE-2022-47165

Cross-Site Request Forgery CSRF vulnerability in CoSchedule plugin = 3.3.8 versions...

CVE-2022-47165

Cross-Site Request Forgery CSRF vulnerability in CoSchedule plugin = 3.3.8 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in CoSchedule plugin = 3.3.8 versions...

CVE-2022-47165 WordPress CoSchedule Plugin <= 3.3.8 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in CoSchedule plugin = 3.3.8 versions...

CVE-2022-47165 WordPress CoSchedule Plugin <= 3.3.8 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in CoSchedule plugin = 3.3.8 versions...

CVE-2022-47165

CVE-2022-47165 describes a Cross-Site Request Forgery (CSRF) in the WordPress CoSchedule plugin for versions

PT-2023-15208 · WordPress · Coschedule

Name of the Vulnerable Software and Affected Versions: CoSchedule plugin versions prior to 3.3.9 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web...

WordPress plugin CoSchedule 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

CoSchedule < 3.3.9 - CSRF

The plugin does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...

WordPress CoSchedule Plugin <= 3.3.8 is vulnerable to Cross Site Request Forgery (CSRF)

Software CoSchedule Type Plugin Vulnerable versions = 3.3.8 Fixed in 3.3.9 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2022-47165 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 13c282a9267d Credits István Márton Required...