Publish to Schedule

Publish to Schedule has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2023; all 2 are fixed as of September 2026. Their average CVSS score is 4.9, and the most serious one scores 5.4 out of 10. 2023 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (50%). Other recurring categories include Cross-Site Scripting.

Every one of the 2 issues recorded for Publish to Schedule has a vendor fix available, so running the current release closes all known holes.

All of these findings were reported by Rio Darmawan. Publish to Schedule is installed on roughly 3,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.

Strategic Overview

Avg CVSSMedium
4.9/ 10
Patch Coverage100%
Open

0

Fixed

2

Get automatic notifications for all Publish to Schedule vulnerabilities before they are exploited.

Highest severity on recordCVSS 5.4CVE-2023-25994

Publish to Schedule <= 4.4.2 - Cross-Site Request Forgery leading to Plugin Option Changes

Read the full analysis

Vulnerability Records

2 records
Publish to Schedule banner
Latestv4.5.8

Publish to Schedule

alexbenfica

Author

alexbenfica

4.3(23)
86/100
Last Updated
2025-12-04 (9mo ago)
Active Installs
3,000+
Downloads
87,035
Requires WP
2.8+
Requires PHP
0+
Tested up to
WP 6.9.7
Created
2012-02-06 (15y ago)

Looking for a way to streamline your WordPress blog post scheduling? Look no further than Publish to Schedule! Publish to Schedule is a powerful and flexible WordPress scheduling plugin that lets you automate your blog post publishing process. With just a few simple configurations, you can set up a schedule that works for you, ensuring that your content is consistently published on the days and times you choose. With the ability to set specific days of the week, number of posts per day, and time intervals for scheduling, Publish to Schedule takes the guesswork out of post publishing. And if you ever need to make adjustments, the plugin provides clear and detailed information in the publish box, allowing you to easily modify dates and times as needed. Publish to Schedule is perfect for bloggers who want to focus on creating great content, without the hassle of manual scheduling. And with its easy-to-use interface, even those with little technical knowledge can quickly get up and running. So if you’re looking to take your blog to the next level, download Publish to Schedule today and see the difference it can make for your content creation process. Support the Development: If you find this plugin useful, please consider making a donation to support ongoing development and maintenance.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C