WordPress plugin
Publish to Schedule security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 2 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High0
- Medium2
- Low0
All Publish to Schedule vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium4.4 | Authenticated (Administrator+) Stored Cross-Site Scripting ≤4.5.4Update to 4.5.5 | CVE-2023-26519 | |
| Medium5.4 | Cross-Site Request Forgery leading to Plugin Option Changes ≤4.4.2Update to 4.5.4 | CVE-2023-25994 |
- Medium4.4Authenticated (Administrator+) Stored Cross-Site Scripting
≤4.5.4Update to 4.5.5
- Medium5.4Cross-Site Request Forgery leading to Plugin Option Changes
≤4.4.2Update to 4.5.4
Publish to Schedule: common questions
Does Publish to Schedule have known vulnerabilities?
Yes. VulnCrest Radar lists 2 known vulnerabilities in Publish to Schedule: 2 medium. None are known to affect version null.
How do I check which version of Publish to Schedule I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Publish to Schedule vulnerability?
CVE-2023-26519, published Feb 27, 2023: Publish to Schedule <= 4.5.4 - Authenticated (Administrator+) Stored Cross-Site Scripting. Severity: Medium (CVSS 4.4).
Is any Publish to Schedule vulnerability listed in CISA KEV?
No. None of the known Publish to Schedule vulnerabilities is currently listed in the CISA KEV catalog.