Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: vberkel Clear all filters
TI-2026-82277 CVE-2026-96666 · GHSA-rv4v-2c82-p7gc

Stored cross-site scripting in Schema App Structured Data plugin

Priority LOW 31

The Schema App Structured Data plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via 'Remove Microdata' Output Filter in all versions up to, and including, 2.3.2 due to insufficient in…

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00296 Published 2026-10-29 No fix listed CWE-79
TI-2024-10449 CVE-2024-11279 · GHSA-ff25-29p3-hm2x

Schema App Structured Data <= 2.2.4 - Reflected Cross-Site Scripting

Priority LOW 28

The Schema App Structured Data plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 2.2.4.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00531 Published 2024-12-12 No fix listed CWE-79
TI-2024-00822 CVE-2024-0892 · GHSA-p6vg-hccp-mxhq

Schema App Structured Data <= 2.2.0 - Cross-Site Request Forgery

Priority LOW 20

The Schema App Structured Data plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.2.0.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00251 Published 2024-06-14 No fix listed CWE-352