WordPress plugin
Schedulicity – Easy Online Scheduling security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High0
- Medium1
- Low0
All Schedulicity – Easy Online Scheduling vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium6.4 | Easy Online Scheduling <= 2.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode ≤2.21No patch available | CVE-2023-0491 |
- Medium6.4Easy Online Scheduling <= 2.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
≤2.21No patch available
Schedulicity – Easy Online Scheduling: common questions
Does Schedulicity – Easy Online Scheduling have known vulnerabilities?
Yes. VulnCrest Radar lists 1 known vulnerability in Schedulicity – Easy Online Scheduling: 1 medium. At least one is not fixed in the latest version.
How do I check which version of Schedulicity – Easy Online Scheduling I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Schedulicity – Easy Online Scheduling vulnerability?
CVE-2023-0491, published Mar 3, 2023: Schedulicity - Easy Online Scheduling <= 2.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode. Severity: Medium (CVSS 6.4).
Is any Schedulicity – Easy Online Scheduling vulnerability listed in CISA KEV?
No. None of the known Schedulicity – Easy Online Scheduling vulnerabilities is currently listed in the CISA KEV catalog.