Search vulnerabilities

Results 2

CVE-2023-25994

WordPress Publish to Schedule Plugin <= 4.4.2 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery (CSRF) vulnerability in Alex Benfica Publish to Schedule plugin <= 4.4.2 versions.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
CVE-2023-26519

WordPress Publish to Schedule Plugin <= 4.5.4 is vulnerable to Cross Site Scripting (XSS)

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Alex Benfica Publish to Schedule plugin <= 4.5.4 versions.

CVSS 3.1 · 5.9 Medium EPSS < 1% KEV · Not listed