Conference Scheduler

Conference Scheduler has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2022 and 2025; all 2 are fixed as of September 2026. Their average CVSS score is 6.3, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 2 of the records (100%).

Every one of the 2 issues recorded for Conference Scheduler has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each. Conference Scheduler is installed on roughly 200 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.

Strategic Overview

Avg CVSSMedium
6.3/ 10
Patch Coverage100%
Open

0

Fixed

2

Get automatic notifications for all Conference Scheduler vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2025-5258

Conference Scheduler <= 2.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via className Parameter

Read the full analysis

Vulnerability Records

2 records
Plugin Profile
Latestv3.1.0

Conference Scheduler

swift

Author

swift

4.2(5)
84/100
Last Updated
2026-07-22 (2mo ago)
Active Installs
200+
Downloads
21,775
Requires WP
5.5+
Requires PHP
7.4+
Tested up to
WP 7.0.4
Created
2017-12-07 (9y ago)

Conference Scheduler allows you to easily manage and display complex workshop schedules for conferences and similar events, and also provide information about the workshops on your website in a clean, searchable, responsive interface. Create and manage details about your workshops using the standard WordPress admin interface and display it all on any page of your site with a simple shortcode. Features Add and edit workshops in the standard WordPress admin Collects and displays important information about each workshop: workshop code, time, location, description, presenter, presenter bio, participant limit Add files to workshops – lets you easily distribute presentation files or other reference material Handles parallel sessions Optionally group workshops by location within a session Categorize workshops into streams and areas with tags Search and filter workshop listings on the front-end for easy access Pick workshops on the front-end so delegates can build their ideal conference schedule Customize the style of workshops easily using the WordPress customizer Responsive design means your schedule looks and works great on all devices – delegates can quickly pull out their phone at any time to check the schedule or workshop info Upgrade to Conference Scheduler Pro and you also get: Import/Export to/from Excel Complete user registration system with optional waitlists for space limited workshops Multi-lingual support with WPML and Polylang compatibility Extensible architecture for customization – adding fields, display templates, search customization Feature Requests If there is a particular feature that you’d like to see in Conference Scheduler, let me know and I’ll consider adding it.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C