plugin
3 known security issues reported for the Coschedule By Todaymade WordPress plugin. Most recent disclosed Nov 4, 2025.
Running Coschedule By Todaymade on your site? Check whether your installed version is affected.
Scan your site freeThe CoSchedule plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 3.4.0. This makes it possible for unauthenticated attackers to perform an unauthorized action.
The CoSchedule plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.3.11. This makes it possible for unauthenticated attackers to extract sensitive user or configuration data.
The CoSchedule plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.3.8. This is due to missing nonce validation on the tm_aj_set_token function. This makes it possible for unauthenticated attackers to set the plugin's schedule token via a forged request, granted they can...
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free