CoSchedule

CoSchedule has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2025; all 3 are fixed as of September 2026. Their average CVSS score is 5.0, and the most serious one scores 5.3 out of 10. 2025 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (33%). Other recurring categories include Exposure Of Sensitive Information To An Unauthorized Actor, Missing Authorization.

Every one of the 3 issues recorded for CoSchedule has a vendor fix available, so running the current release closes all known holes.

3 independent researchers contributed these findings, one record each. CoSchedule is installed on roughly 3,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.8.8.

Strategic Overview

Avg CVSSMedium
5.0/ 10
Patch Coverage100%
Open

0

Fixed

3

Get automatic notifications for all CoSchedule vulnerabilities before they are exploited.

Highest severity on recordCVSS 5.3CVE-2025-49913

CoSchedule <= 3.4.0 - Missing Authorization

Read the full analysis

Vulnerability Records

3 records
CoSchedule banner
Latestv3.4.2
4.6(188)
92/100
Last Updated
2026-06-03 (3mo ago)
Active Installs
3,000+
Downloads
517,450
Requires WP
3.5+
Requires PHP
0+
Tested up to
WP 6.8.8
Created
2013-09-26 (13y ago)

CoSchedule is the marketing industry’s leading provider of content calendar, content optimization, and marketing education products. Its dynamic family of agile marketing management products serve more than 50,000 marketers worldwide, helping them organize their work, deliver projects on time, and prove marketing team value. Collectively, CoSchedule products empower nearly 100,000 marketers to complete more high-quality work in less time. As recognized with accolades from Inc. 5000, Gartner’s Magic Quadrant, and G2Crowd, CoSchedule is one of the fastest-growing and most valued companies its customers recommend. Try the Marketing Calendar for free. Marketing Calendar See every project on a unified calendar of record. Keep stakeholders “in the know” and pivot quickly when priorities change. Balance scheduled work with urgent requests when you need to be agile. Customize your calendar for your team. Focus on the work that matters most with personalized setup and filtering. Content Organizer Eliminate content bottlenecks from idea to promotion. Optimize your editorial process to save time and deliver more. Centralize publishing and promotion by connecting your tools. Work Organizer Maximize resources to increase output. Implement consistent, defined workflows to speed up production and identify how urgent changes impact proactively planned work. Asset Organizer Catalog and maintain control of brand assets. Customize taxonomies to quickly find, update, and share files. Securely share folders and files with stakeholders to make sure your work is up-to-date. Integrate CoSchedule with Your Favorite Tools No more jumping from screen to screen to manage your tools. CoSchedule integrates with the tools you love, giving you powerful options for editing content, tracking your success, simplifying your workflows, and more. Schedule a demo of the Marketing Suite.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C