EUVD-2023-48617

Malicious code in bioql PyPI...

PT-2025-1480 · Unknown · Schema App Structured Data

Name of the Vulnerable Software and Affected Versions: Schema App Structured Data versions 1.23.1 and earlier Description: The issue is related to a Missing Authorization vulnerability in Schema App Structured Data, which allows exploiting incorrectly configured access control security levels...

CVE-2023-44258: Missing Authorization

Missing Authorization vulnerability in vberkel Schema App Structured Data schema-app-structured-data-for-schemaorg allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Schema App Structured Data: from n/a through = 1.23.1...

CVE-2024-11279: Improper Neutralization of Input During Web Page Generation

The Schema App Structured Data plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 2.2.4. This makes it possible for unauthenticated attackers to inject arbitrary web scrip...

Wordpress Schema App Structured Data plugin <= 2.2.0 - Cross-Site Request Forgery vulnerability

Cross-Site Request Forgery vulnerability discovered by Francesco Carlucci in WordPress Plugin Schema App Structured Data versions = 2.2.0...

PT-2024-15897

Name of the Vulnerable Software and Affected Versions The Schema App Structured Data plugin for WordPress versions up to, and including, 2.2.0 Description The issue is due to missing or incorrect nonce validation on the MarkUpdate function, making it possible for unauthenticated attackers to upda...

CVE-2024-0892: Cross-Site Request Forgery (CSRF)

The Schema App Structured Data plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.2.0. This is due to missing or incorrect nonce validation on the MarkUpdate function. This makes it possible for unauthenticated attackers to update and delete...

Schema App Structured Data <= 2.2.0 - Cross-Site Request Forgery

Description The Schema App Structured Data plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.2.0. This is due to missing or incorrect nonce validation on the MarkUpdate function. This makes it possible for unauthenticated attackers to update...

CVE-2024-0893: Missing Authorization

The Schema App Structured Data plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the MarkupUpdate function in all versions up to, and including, 2.2.0. This makes it possible for authenticated attackers, with subscriber access or higher, ...

WordPress plugin Schema App Structured Data security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2024-15898 · WordPress · Schema App Structured Data

Name of the Vulnerable Software and Affected Versions: The Schema App Structured Data plugin for WordPress versions prior to 2.1.1 Description: The issue allows authenticated attackers with subscriber access or higher to update or delete post metadata due to a missing capability check on the...