High · 7.1 CVE-2023-36682 EUVD-2023-40625GHSA-vgj7-f7pg-mh5x

WordPress Schema Pro Plugin <= 2.7.7 is vulnerable to Cross Site Request Forgery (CSRF)

Published Nov 30, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Brainstorm Force US Product: Schema Pro

Description

Cross-Site Request Forgery (CSRF) vulnerability in Brainstorm Force US LLC Schema Pro allows Cross Site Request Forgery.This issue affects Schema Pro: from n/a through 2.7.7.

Affected products

Vendor	Product	Affected	Fixed
Brainstorm Force US	Schema Pro	≤ 2.7.7	—

References

https://patchstack.com/database/vulnerability/wp-schema-pro/wordpress-schema-pro-plugin-2-7-7-cross-site-request-forgery-csrf-vulnerability?_s_id=cve vdb-entry