4 matches found
CVE-2024-1564
The wp-schema-pro WordPress plugin before 2.7.16 does not validate post access allowing a contributor user to access custom fields on any post regardless of post type or status via a shortcode
CVE-2018-20977
The CVE-2018-20977 issue is an XSS flaw in the WordPress plugin All-In-One Schema.org Rich Snippets. Affected product: all-in-one-schemaorg-rich-snippets plugin for WordPress; vulnerable component: settings page input handling; root cause: improper handling of user input enabling stored/reflectiv...
CVE-2023-36682
Technical details about CVE-2023-36682 are not provided in the connected documents. Monitor vendor advisories for patch status and mitigations; initial description notes a CSRF issue in Schema Pro up to version 2.7.7.