WordPress plugin
Structured Content (JSON-LD) #wpsc security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High1
- Medium9
- Low0
All Structured Content (JSON-LD) #wpsc vulnerabilities
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤1.7.0No patch available
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via FAQ Block
≤1.6.4Update to 1.7.0
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via sc_fs_local_business Shortcode
≤1.6.4Update to 1.7.0
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤1.6.3Update to 1.6.4
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via sc_fs_local_business Shortcode
≤1.6.3Update to 1.6.4
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤1.6.2Update to 1.6.3
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Classic Editor Shortcode
≤1.6.1Update to 1.6.2
- High8.8Authenticated (Contributor+) PHP Object Injection
≤1.5.3Update to 1.6.0
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤1.5.3Update to 1.6.0
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
≤1.5.0Update to 1.5.1
Structured Content (JSON-LD) #wpsc: common questions
Does Structured Content (JSON-LD) #wpsc have known vulnerabilities?
Yes. VulnCrest Radar lists 10 known vulnerabilities in Structured Content (JSON-LD) #wpsc: 1 high, 9 medium. At least one is not fixed in the latest version.
How do I check which version of Structured Content (JSON-LD) #wpsc I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Structured Content (JSON-LD) #wpsc vulnerability?
CVE-2026-57763, published Jul 2, 2026: Structured Content (JSON-LD) #wpsc <= 1.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting. Severity: Medium (CVSS 6.4).
Is any Structured Content (JSON-LD) #wpsc vulnerability listed in CISA KEV?
No. None of the known Structured Content (JSON-LD) #wpsc vulnerabilities is currently listed in the CISA KEV catalog.