Skip to content
OpenAdvisories

Product · WPDeveloper

SchedulePress

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.4
    CVE-2026-114120

    SchedulePress before 5.3.5 Missing Authorization via wpsp_el_editor_form AJAX Action

    SchedulePress before 5.3.5 contains a missing authorization vulnerability that allows authenticated Contributor-level users to change any post's status and publish date via the wpsp_el_editor_form AJAX action. Attackers can reuse the wpsp-el-editor nonce from…

    WPDeveloper SchedulePress
  • Medium 6.5
    CVE-2024-32717

    WordPress SchedulePress plugin <= 5.0.8 - Broken Access Control vulnerability

    Missing Authorization vulnerability in WPDeveloper SchedulePress.This issue affects SchedulePress: from n/a through 5.0.8.

    WPDeveloper SchedulePress