4 matches found
CVE-2024-1564
The wp-schema-pro WordPress plugin (prior to version 2.7.16 ) is vulnerable to Broken Access Control . The flaw stems from a failure to validate post access permissions, which allows a user with Contributor privileges to access custom fields on any post, regardless of its type or status, by using...
CVE-2018-20977
The CVE-2018-20977 issue is an XSS flaw in the WordPress plugin All-In-One Schema.org Rich Snippets. Affected product: all-in-one-schemaorg-rich-snippets plugin for WordPress; vulnerable component: settings page input handling; root cause: improper handling of user input enabling stored/reflectiv...
CVE-2023-36682
Technical details about CVE-2023-36682 are not provided in the connected documents. Monitor vendor advisories for patch status and mitigations; initial description notes a CSRF issue in Schema Pro up to version 2.7.7.