Skip to content
OpenAdvisories

Vendor

CoSchedule

6 known vulnerabilities.

Products

Headline Analyzer 3 CoSchedule 3
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 6.5
    CVE-2025-62974

    WordPress Headline Analyzer plugin <= 1.3.7 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CoSchedule Headline Analyzer headline-analyzer allows Stored XSS.This issue affects Headline Analyzer: from n/a through <= 1.3.7.

    CoSchedule Headline Analyzer
  • Medium 5.3
    CVE-2025-49913

    WordPress CoSchedule plugin <= 3.4.0 - Broken Access Control vulnerability

    Missing Authorization vulnerability in CoSchedule CoSchedule coschedule-by-todaymade allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CoSchedule: from n/a through <= 3.4.0.

    CoSchedule CoSchedule
  • Medium 5.3
    CVE-2025-60119

    WordPress CoSchedule Plugin <= 3.3.11 - Sensitive Data Exposure Vulnerability

    Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in CoSchedule CoSchedule coschedule-by-todaymade allows Retrieve Embedded Sensitive Data.This issue affects CoSchedule: from n/a through <= 3.3.11.

    CoSchedule CoSchedule
  • Medium 6.5
    CVE-2023-46195

    WordPress Headline Analyzer plugin <= 1.3.1 - Broken Access Control vulnerability

    Missing Authorization vulnerability in CoSchedule Headline Analyzer headline-analyzer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Headline Analyzer: from n/a through <= 1.3.1.

    CoSchedule Headline Analyzer
  • Medium 4.3
    CVE-2024-32806

    WordPress Headline Analyzer plugin <= 1.3.3 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in CoSchedule Headline Analyzer.This issue affects Headline Analyzer: from n/a through 1.3.3.

    CoSchedule Headline Analyzer
  • Medium 4.3
    CVE-2022-47165

    WordPress CoSchedule Plugin <= 3.3.8 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in CoSchedule plugin <= 3.3.8 versions.

    CoSchedule CoSchedule