CVE-2024-0892: Cross-Site Request Forgery (CSRF)

The Schema App Structured Data plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.2.0. This is due to missing or incorrect nonce validation on the MarkUpdate function. This makes it possible for unauthenticated attackers to update and delete...

PT-2024-15897

Name of the Vulnerable Software and Affected Versions The Schema App Structured Data plugin for WordPress versions up to, and including, 2.2.0 Description The issue is due to missing or incorrect nonce validation on the MarkUpdate function, making it possible for unauthenticated attackers to upda...