Schedulepress (Wpdeveloper) - vulnerabilities (CVEs)

2 CVEs, 1 in the last 30 days, 2 known versions, newest CVE from 2026-10-21. Vendor: Wpdeveloper.

CVEs of Schedulepress

• CVE-2026-114120 - CVSS 5.4 (medium), 2026-10-21: SchedulePress before 5.3.5 contains a missing authorization vulnerability that allows authenticated Contributor-level users to change any post's status and…
• CVE-2024-6557 - CVSS 5.3 (medium), 2024-07-16: The SchedulePress – Auto Post & Publish, Auto Social Share, Schedule Posts with Editorial Calendar & Missed Schedule Post Publisher plugin for WordPress is…
• CVE-2024-32717 - CVSS 6.5 (medium), 2024-05-14: Missing Authorization vulnerability in WPDeveloper SchedulePress.This issue affects SchedulePress: from n/a through 5.0.8.