GCVE - cpe:2.3:a:coschedule:coschedule:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:coschedule:coschedule:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Coschedule (`d6cb7265-a6d3-5d9f-8551-eeb3e651054d`)
Product	Coschedule (`ccba49fb-e733-54ce-9ae3-6d4ecca798c8`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-60119`	vulnerable	2026-06-08 07:37:26.654429	WordPress CoSchedule Plugin <= 3.3.11 - Sensitive Data Exposure Vulnerability MEDIUM (5.3) Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in CoSchedule CoSchedule coschedule-by-todaymade allows Retrieve Embedded Sensitive Data.This issue affects CoSchedule: from n/a through <= 3.3.11. Published: 2025-09-26T08:31:36.353Z Updated: 2026-04-28T16:13:55.166Z Open on db.gcve.eu Reference links https://patchstack.com/database/Wordpress/Plugin/coschedule-by-todaymade/vulnerability/wordpress-coschedule-plugin-3-3-10-sensitive-data-exposure-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-49913`	vulnerable	2026-06-08 07:29:15.098400	WordPress CoSchedule plugin <= 3.4.0 - Broken Access Control vulnerability MEDIUM (5.3) Missing Authorization vulnerability in CoSchedule CoSchedule coschedule-by-todaymade allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CoSchedule: from n/a through <= 3.4.0. Published: 2025-10-22T14:32:11.977Z Updated: 2026-04-28T16:13:07.838Z Open on db.gcve.eu Reference links https://patchstack.com/database/Wordpress/Plugin/coschedule-by-todaymade/vulnerability/wordpress-coschedule-plugin-3-4-0-broken-access-control-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-47165`	vulnerable	2026-06-08 05:50:39.931690	WordPress CoSchedule Plugin <= 3.3.8 is vulnerable to Cross Site Request Forgery (CSRF) MEDIUM (4.3) Cross-Site Request Forgery (CSRF) vulnerability in CoSchedule plugin <= 3.3.8 versions. Published: 2023-05-25T09:07:22.356Z Updated: 2026-04-28T16:07:56.705Z Open on db.gcve.eu Reference links https://patchstack.com/database/vulnerability/coschedule-by-todaymade/wordpress-coschedule-plugin-3-3-8-cross-site-request-forgery-csrf?_s_id=cve	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.