Skip to content
OpenAdvisories
Medium · 5.3 CVE-2025-60119 EUVD-2025-31280GHSA-439w-vqfw-r935

WordPress CoSchedule Plugin <= 3.3.11 - Sensitive Data Exposure Vulnerability

Published Sep 26, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in CoSchedule CoSchedule coschedule-by-todaymade allows Retrieve Embedded Sensitive Data.This issue affects CoSchedule: from n/a through <= 3.3.11.

Affected products

VendorProductAffectedFixed
CoSchedule CoSchedule ≤ 3.3.11 —

References