Skip to content
OpenAdvisories

Product · vberkel

Schema App Structured Data

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 5.3
    CVE-2023-44258

    WordPress Schema App Structured Data plugin <= 1.23.1 - Broken Access Control + CSRF vulnerability

    Missing Authorization vulnerability in vberkel Schema App Structured Data schema-app-structured-data-for-schemaorg allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Schema App Structured Data: from n/a through <= 1.23.…

    vberkel Schema App Structured Data
  • Medium 6.1
    CVE-2024-11279

    Schema App Structured Data <= 2.2.4 - Reflected Cross-Site Scripting

    The Schema App Structured Data plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 2.2.4. This makes it possible for unauthenticated…

    vberkel Schema App Structured Data Web / CMS
  • Medium 4.3
    CVE-2024-0892

    Schema App Structured Data <= 2.2.0 - Cross-Site Request Forgery

    The Schema App Structured Data plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.2.0. This is due to missing or incorrect nonce validation on the MarkUpdate function. This makes it possible for unauthenti…

    vberkel Schema App Structured Data Web / CMS
  • Medium 4.3
    CVE-2024-0893

    Schema App Structured Data <= 2.2.0 - Missing Authorization

    The Schema App Structured Data plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the MarkupUpdate function in all versions up to, and including, 2.2.0. This makes it possible for authenticated attacke…

    vberkel Schema App Structured Data Web / CMS