Approved changes feed: RSS · Atom

cpe:2.3:a:schemaapp:schema_app_structured_data:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorSchemaapp (be65e19c-e4a9-52d6-be46-c61ac2670901)
ProductSchema App Structured Data (54cbe849-14e7-58b2-a7e0-aca28efb82be)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/wpplugins/schema-app-structured-data-for-schemaorg purl2cpe 2026-06-01 10:16:04.980207

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-0893 vulnerable 2026-06-08 06:22:03.079023 Schema App Structured Data <= 2.2.0 - Missing Authorization
MEDIUM (4.3)
The Schema App Structured Data plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the MarkupUpdate function in all versions up to, and including, 2.2.0. This makes it possible for authenticated attackers, with subscriber access or higher, to update or delete post metadata.
Published: 2024-05-24T06:42:15.486Z
Updated: 2026-04-08T16:36:00.728Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-44258 vulnerable 2026-06-08 06:12:39.845876 WordPress Schema App Structured Data plugin <= 1.23.1 - Broken Access Control + CSRF vulnerability
MEDIUM (5.3)
Missing Authorization vulnerability in vberkel Schema App Structured Data schema-app-structured-data-for-schemaorg allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Schema App Structured Data: from n/a through <= 1.23.1.
Published: 2025-01-02T11:59:46.069Z
Updated: 2026-05-11T22:31:52.098Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.