Conference Scheduler
Conference Scheduler has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2022 and 2025; all 2 are fixed as of September 2026. Their average CVSS score is 6.3, and the most serious one scores 6.4 out of 10.
The most common weakness is Cross-Site Scripting, behind 2 of the records (100%).
Every one of the 2 issues recorded for Conference Scheduler has a vendor fix available, so running the current release closes all known holes.
2 independent researchers contributed these findings, one record each. Conference Scheduler is installed on roughly 200 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.
CVE-2025-5258Conference Scheduler <= 2.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via className Parameter
Read the full analysisVulnerability Records
Conference Scheduler
Author
swift
Conference Scheduler allows you to easily manage and display complex workshop schedules for conferences and similar events, and also provide information about the workshops on your website in a clean, searchable, responsive interface. Create and manage details about your workshops using the standard WordPress admin interface and display it all on any page of your site with a simple shortcode. Features Add and edit workshops in the standard WordPress admin Collects and displays important information about each workshop: workshop code, time, location, description, presenter, presenter bio, participant limit Add files to workshops – lets you easily distribute presentation files or other reference material Handles parallel sessions Optionally group workshops by location within a session Categorize workshops into streams and areas with tags Search and filter workshop listings on the front-end for easy access Pick workshops on the front-end so delegates can build their ideal conference schedule Customize the style of workshops easily using the WordPress customizer Responsive design means your schedule looks and works great on all devices – delegates can quickly pull out their phone at any time to check the schedule or workshop info Upgrade to Conference Scheduler Pro and you also get: Import/Export to/from Excel Complete user registration system with optional waitlists for space limited workshops Multi-lingual support with WPML and Polylang compatibility Extensible architecture for customization – adding fields, display templates, search customization Feature Requests If there is a particular feature that you’d like to see in Conference Scheduler, let me know and I’ll consider adding it.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C