SimpleSchema Free

SimpleSchema Free has one disclosed vulnerability in the WordSec catalog, all reported in 2024; it remains unpatched as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for SimpleSchema Free has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2024.

All of these findings were reported by SOPROBRO. SimpleSchema Free is installed on roughly 20 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 4.3.34.

Strategic Overview

Avg CVSSMedium
6.4/ 10
Patch Coverage0%
Open

1

Fixed

0

Get automatic notifications for all SimpleSchema Free vulnerabilities before they are exploited.

Most severe open issueCVSS 6.4CVE-2024-53771

SimpleSchema <= 1.7.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records
Plugin Profile
Latestv1.7.6.9

SimpleSchema Free

sergiomico

Author

sergiomico

3.0(2)
60/100
Last Updated
2016-01-26 (11y ago)
Active Installs
20+
Downloads
2,648
Requires WP
3.0.1+
Requires PHP
0+
Tested up to
WP 4.3.34
Created
2015-10-22 (11y ago)

EN: This microdata insertion shortcode tool prevents the WordPress built-in TinyMCE content editor removing microdata when you change post content editor view from code text to visual. ES: Esta herramienta shortcode para inserción de microdatos evita que el editor de contenidos TinyMCE incorporado en WordPress elimine los microdatos cuando cambias la vista del contenido del post de vista de código a vista visual. You should read Changelog and Other notes tabs. Examples Widgets availables: SimpleSchema LocalBusiness Schema. SimpleSchema LocalBusiness Services Schema (admits Services and Areas served). Shortcode examples: Since version 1.2: Example with [meta_geo_coordinates] [meta_geo_coordinates lat="39.321123" lon="0.654987" /] will return <div itemscope="" itemprop="geo" itemtype="http://schema.org/GeoCoordinates"> <meta itemprop="lat" content="39.321123"> <meta itemprop="lon" content="0.654987"> </div> Example with [meta_blog_posting] [meta_blog_posting /] will return <div itemscope="" itemtype="http://schema.org/blogPosting"> <meta itemprop="headline" content="$the_post_title"> <meta itemprop="datePublished" content="$the_post_date_Y_m_d"> <meta itemprop="image" content="$the_post_thumbnail_image_url"> </div> Since version 1.1: Example 1: [keywords][/keywords] [keywords]Cars[/keywords] will return: <strong itemprop="keywords">Cars</strong> Example 2: [keywords tag=”HTMLtag“][/keywords] [keywords tag=h2]Cars[/keywords] will return: <h2 itemprop="keywords">Cars</h2> Example 3: [itemprop][/itemprop] [itemprop name="name"]LocalBusiness Name[/itemprop] will return: <meta itemprop="name" content="LocalBusiness Name"/> Example 4: [itemprop tag=”HTMLtag“][/itemprop] [itemprop name="name" tag="h1"]LocalBusiness Name[/itemprop] will return: <h1 itemprop="name">LocalBusiness Name</h1> Example 4: [itemscope itemprop=”Its itemprop, if needed” itemtype=”Its schema name“][/itemscope] [itemscope itemprop="owns" itemtype="Product"][itemprop name="name" tag="h2"][keywords]Cars[/keywords][/itemprop][/itemscope] will return: <h1 itemprop="name">LocalBusiness Name</h1> Complete example: parent itemscope wrapping itemscope childs [itemscope itemtype="LocalBusiness" tag="div" start /] [itemprop name="name" tag="h1"][keywords]LocalBusiness Name[/keywords][/itemprop] [itemscope itemprop="owns" itemtype="Product"][itemprop name="name" tag="h2"][keywords]Cars[/keywords][/itemprop][/itemscope] [itemscope itemprop="owns" itemtype="Product"][itemprop name="name" tag="h2"][keywords]Motorcycles[/keywords][/itemprop][/itemscope] Email: <a href="mailto:business@email.com">[itemprop name="email" tag="em"]business@email.com[/itemprop]</a> Telephone: <a href="tel:+1-800-000-000">[itemprop name="telephone" tag="strong"]+1-800-000-000[/itemprop]</a> [itemscope tag="div" end /] or [is itemtype="LocalBusiness" tag="div" start /] [ip name="name" tag="h1"][keywords]LocalBusiness Name[/keywords][/ip] [is itemprop="owns" itemtype="Product"][ip name="name" tag="h2"][kw]Cars[/kw][/ip][/is] [is itemprop="owns" itemtype="Product"][ip name="name" tag="h2"][kw]Motorcycles[/kw][/ip][/is] Email: <a href="mailto:business@email.com">[ip name="email" tag="em"]business@email.com[/ip]</a> Telephone: <a href="tel:+1-800-000-000">[ip name="telephone" tag="strong"]+1-800-000-000[/ip]</a> [is tag="div" end /] will return: <div itemscope="" itemtype="http://schema.org/LocalBusiness"> <h1 itemprop="name"><strong itemprop="keywords">LocalBusiness Name</strong></h1> <div itemscope="" itemprop="owns" itemtype="http://schema.org/Product"><h2 itemprop="name"><strong itemprop="keywords">Cars</strong></h2></div> <div itemscope="" itemprop="owns" itemtype="http://schema.org/Product"><h2 itemprop="name"><strong itemprop="keywords">Motorcycles</strong></h2></div> Email: <a href="mailto:business@email.com"><em itemprop="email">business@email.com</em></a><br> Telephone: <a href="tel:+1-800-000-000"><strong itemprop="telephone">+1-800-000-000</strong></a> </div>

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C