WordPress plugin
SchedulePress – Auto Post & Publish, Auto Social Share, Schedule Posts with Editorial Calendar & Missed Schedule Post Publisher security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High0
- Medium4
- Low0
All SchedulePress – Auto Post & Publish, Auto Social Share, Schedule Posts with Editorial Calendar & Missed Schedule Post Publisher vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium4.3 | Missing Authorization <5.3.5No patch available | CVE-2026-114120 | |
| Medium5.3 | Unauthenticated Full Path Disclosure ≤5.1.3Update to 5.1.4 | CVE-2024-6557 | |
| Medium4.3 | Missing Authorization ≤5.0.8Update to 5.0.9 | CVE-2024-32717 | |
| Medium4.3 | Insufficient Authorization to Authenticated (Contributor+) Arbitrary Post Modifications ≤5.0.4Update to 5.0.5 | — |
- Medium4.3Missing Authorization
<5.3.5No patch available
- Medium5.3Unauthenticated Full Path Disclosure
≤5.1.3Update to 5.1.4
- Medium4.3Missing Authorization
≤5.0.8Update to 5.0.9
- Medium4.3Insufficient Authorization to Authenticated (Contributor+) Arbitrary Post Modifications
≤5.0.4Update to 5.0.5
SchedulePress – Auto Post & Publish, Auto Social Share, Schedule Posts with Editorial Calendar & Missed Schedule Post Publisher: common questions
Does SchedulePress – Auto Post & Publish, Auto Social Share, Schedule Posts with Editorial Calendar & Missed Schedule Post Publisher have known vulnerabilities?
Yes. VulnCrest Radar lists 4 known vulnerabilities in SchedulePress – Auto Post & Publish, Auto Social Share, Schedule Posts with Editorial Calendar & Missed Schedule Post Publisher: 4 medium. At least one is not fixed in the latest version.
How do I check which version of SchedulePress – Auto Post & Publish, Auto Social Share, Schedule Posts with Editorial Calendar & Missed Schedule Post Publisher I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent SchedulePress – Auto Post & Publish, Auto Social Share, Schedule Posts with Editorial Calendar & Missed Schedule Post Publisher vulnerability?
CVE-2026-114120, published Oct 21, 2026: SchedulePress – Auto Post & Publish, Auto Social Share, Schedule Posts with Editorial Calendar & Missed Schedule Post Publisher < 5.3.5 - Missing Authorization. Severity: Medium (CVSS 4.3).
Is any SchedulePress – Auto Post & Publish, Auto Social Share, Schedule Posts with Editorial Calendar & Missed Schedule Post Publisher vulnerability listed in CISA KEV?
No. None of the known SchedulePress – Auto Post & Publish, Auto Social Share, Schedule Posts with Editorial Calendar & Missed Schedule Post Publisher vulnerabilities is currently listed in the CISA KEV catalog.