PatchTheCVEschema vulnerabilities and fixes
Recent CVEs affecting schema, with upgrade or downgrade steps. 4 tracked.
schema has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 4. Most recent: 2024-03-25. Highest priority: CVE-2024-1564 (score 30/100).
- CVE-2024-1564 MEDIUM 4.3 UPGRADE The wp-schema-pro WordPress plugin before 2.7.16 does not validate post access allowing a contributor user to
- CVE-2023-36682 HIGH 7.1 UPGRADE Cross-Site Request Forgery (CSRF) vulnerability in Brainstorm Force US LLC Schema Pro allows Cross Site Reques
- CVE-2023-25058 MEDIUM 4.3 UPGRADE Cross-Site Request Forgery (CSRF) vulnerability in Brainstorm Force Schema – All In One Schema Rich Snippets p
- CVE-2022-33154 MEDIUM 5.4 UPGRADE The schema (aka Embedding schema.org vocabulary) extension before 1.13.1 and 2.x before 2.5.1 for TYPO3 allows
FAQ
How do I fix schema vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is schema being exploited right now?
None of the tracked schema CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which schema CVE should I patch first?
CVE-2024-1564 currently ranks highest (30/100): The wp-schema-pro WordPress plugin before 2.7.16 does not validate post access allowing a contributor user to .