All In One Schemaorg Rich Snippets Vulnerabilities

[en] Cross-Site Request Forgery (CSRF) vulnerability in Brainstorm Force Schema – All In One Schema Rich Snippets plugin <= 1.6.5 versions.

Affected:

up to 1.6.6

Fixed in:

1.6.6

Disclosed:

May 26, 2023

CVE-2023-25058 on NVD →

The Schema - All In One Schema Rich Snippets plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.6.5. This is due to missing or incorrect nonce validation on the rich_snippet_dashboard function. This makes it possible for unauthenticated attackers to perform unauthorized...

CVSS:

4.3

Affected:

up to 1.6.5

Fixed in:

1.6.6

Disclosed:

Feb 13, 2023

CVE-2023-25058 on NVD →

[en] The all-in-one-schemaorg-rich-snippets plugin before 1.5.0 for WordPress has XSS on the settings page.

Affected:

up to 1.5.0

Fixed in:

1.5.0

Disclosed:

Aug 21, 2019

CVE-2018-20977 on NVD →

The all-in-one-schemaorg-rich-snippets plugin before 1.5.0 for WordPress has XSS on the settings page.

CVSS:

6.1

Affected:

up to 1.5.0

Fixed in:

1.5.0

Disclosed:

Apr 4, 2017

CVE-2018-20977 on NVD →