https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-1564.htmlhttps://patchthecve.com/cve/CVE-2024-1564.htmlWed, 17 Jun 2026 07:04:31 +0000MEDIUM 4.3: The wp-schema-pro WordPress plugin before 2.7.16 does not validate post access allowing a contributor user to access custom fields on any post regardless of post type or status via a shortcodehttps://patchthecve.com/cve/CVE-2023-36682.htmlhttps://patchthecve.com/cve/CVE-2023-36682.htmlWed, 17 Jun 2026 06:06:49 +0000HIGH 7.1: Cross-Site Request Forgery (CSRF) vulnerability in Brainstorm Force US LLC Schema Pro allows Cross Site Request Forgery.This issue affects Schema Pro: from n/a through 2.7.7.https://patchthecve.com/cve/CVE-2023-25058.htmlhttps://patchthecve.com/cve/CVE-2023-25058.htmlWed, 17 Jun 2026 05:40:35 +0000MEDIUM 4.3: Cross-Site Request Forgery (CSRF) vulnerability in Brainstorm Force Schema – All In One Schema Rich Snippets plugin <= 1.6.5 versions.https://patchthecve.com/cve/CVE-2022-33154.htmlhttps://patchthecve.com/cve/CVE-2022-33154.htmlWed, 17 Jun 2026 04:48:30 +0000MEDIUM 5.4: The schema (aka Embedding schema.org vocabulary) extension before 1.13.1 and 2.x before 2.5.1 for TYPO3 allows XSS.