What’s Vulnerable › Products

WPDeveloper SchedulePress vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your WPDeveloper SchedulePress version is affected

Latest WPDeveloper SchedulePress vulnerabilities

• CVE-2026-114120 — SchedulePress before 5.3.5 Missing Authorization via wpsp_el_editor_form AJAX Action (CVSS 5.4)
• CVE-2024-6557 — SchedulePress <= 5.1.3 - Unauthenticated Full Path Disclosure (CVSS 5.3)
• CVE-2024-32717 — WordPress SchedulePress plugin <= 5.0.8 - Broken Access Control vulnerability (CVSS 6.5)