Schema App Structured Data
Approved changes feed: RSS · Atom
cpe:2.3:a:vberkel:schema_app_structured_data:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Vberkel (51db3940-0d69-51be-bfd3-f4fca11d71c5) |
|---|---|
| Product | Schema App Structured Data (0fad58f7-7522-5396-a4f9-737f188bf8bf) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-96666 |
vulnerable | 2026-11-03 10:15:27.964004 |
Schema App Structured Data <= 2.3.2 - Unauthenticated Stored Cross-Site Scripting via Comment Content via 'Remove Microdata' Output Filter
HIGH (7.2)
The Schema App Structured Data plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via 'Remove Microdata' Output Filter in all versions up to, and including, 2.3.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Exploitation requires that an administrator has enabled the plugin's 'Remove Microdata' option and approves the malicious comment.
Published: 2026-10-29T03:39:15.064Z
Updated: 2026-10-29T10:45:42.686Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-11279 |
vulnerable | 2026-06-08 06:23:49.295207 |
Schema App Structured Data <= 2.2.4 - Reflected Cross-Site Scripting
MEDIUM (6.1)
The Schema App Structured Data plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 2.2.4. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
Published: 2024-12-12T03:23:06.246Z
Updated: 2026-04-08T16:50:17.520Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-0893 |
vulnerable | 2026-06-08 06:22:03.077876 |
Schema App Structured Data <= 2.2.0 - Missing Authorization
MEDIUM (4.3)
The Schema App Structured Data plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the MarkupUpdate function in all versions up to, and including, 2.2.0. This makes it possible for authenticated attackers, with subscriber access or higher, to update or delete post metadata.
Published: 2024-05-24T06:42:15.486Z
Updated: 2026-04-08T16:36:00.728Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-0892 |
vulnerable | 2026-06-08 06:22:03.076492 |
Schema App Structured Data <= 2.2.0 - Cross-Site Request Forgery
MEDIUM (4.3)
The Schema App Structured Data plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.2.0. This is due to missing or incorrect nonce validation on the MarkUpdate function. This makes it possible for unauthenticated attackers to update and delete post metadata via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
Published: 2024-06-14T03:35:40.793Z
Updated: 2026-04-08T16:42:22.430Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-44258 |
vulnerable | 2026-06-08 06:12:39.845117 |
WordPress Schema App Structured Data plugin <= 1.23.1 - Broken Access Control + CSRF vulnerability
MEDIUM (5.3)
Missing Authorization vulnerability in vberkel Schema App Structured Data schema-app-structured-data-for-schemaorg allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Schema App Structured Data: from n/a through <= 1.23.1.
Published: 2025-01-02T11:59:46.069Z
Updated: 2026-05-11T22:31:52.098Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.