Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: scheduler Clear all filters
TI-2025-16409 CVE-2025-22523 · GHSA-6vp2-xfpj-33p7

WordPress Schedule Plugin <= 1.0.0 - SQL Injection vulnerability

Priority MEDIUM 46

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in scheduler Schedule schedule allows Blind SQL Injection.This issue affects Schedule: from n/a through <= 1.0.0.

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00361 Published 2025-03-28 No fix listed CWE-89
TI-2024-12911 CVE-2024-13891 · GHSA-h5p7-7wx6-9q49

Schedule <= 1.0.0 - Reflected XSS

Priority MEDIUM 64

The Schedule WordPress plugin through 1.0.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users suc…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00273 Published 2025-03-13 No fix listed CWE-79