Remove Schema

Remove Schema has one disclosed vulnerability in the WordSec catalog, all reported in 2021; it is fixed as of September 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (100%).

The one issue recorded for Remove Schema has a vendor fix available, so running the current release closes it.

All of these findings were reported by Jerome Bruandet. Remove Schema is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.

Strategic Overview

Avg CVSSMedium

4.3/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Remove Schema vulnerabilities before they are exploited.

Highest severity on recordCVSS 4.3CVE-2021-4403

Remove Schema <= 1.5 - Cross-Site Request Forgery Bypass

Read the full analysis

Vulnerability Records

1 records


2021-06-21 00:00	Remove Schema <= 1.5 - Cross-Site Request Forgery Bypass Remove Schema <= 1.5	`CVE-2021-4403`	4.3 Medium	Jerome Bruandet	Yes

Showing 1–1 of 1 reports

Latestv2.0.0

Remove Schema

Author

Tim van Iersel

4.8(12)

96/100

Last Updated

2026-05-11 (4mo ago)

Active Installs

1,000+

Downloads

24,121

Requires WP

6.8+

Requires PHP

8.2+

Tested up to

WP 6.9.7

Created

2019-04-20 (8y ago)

Remove Schema optionally removes all schema markup from your website. You have the option to remove: All JSON-ld All Microdata All RDFa And remove plugin/theme specific markup: WooCommerce WooCommerce emails Yoast SEO Schema Pro GeneratePress themes

View on WordPress.org