4 matches found
CVE-2024-1564
The CVE-2024-1564 entry concerns the wp-schema-pro WordPress plugin. Affected versions prior to 2.7.16 do not validate post access, enabling a Contributor-level user to read custom fields on any post (regardless of post type or status) by using a shortcode. The underlying issue is a missing autho...
CVE-2018-20977
The CVE-2018-20977 issue is an XSS flaw in the WordPress plugin All-In-One Schema.org Rich Snippets. Affected product: all-in-one-schemaorg-rich-snippets plugin for WordPress; vulnerable component: settings page input handling; root cause: improper handling of user input enabling stored/reflectiv...
CVE-2023-36682
Technical details about CVE-2023-36682 are not provided in the connected documents. Monitor vendor advisories for patch status and mitigations; initial description notes a CSRF issue in Schema Pro up to version 2.7.7.