SimpleSchema Free
SimpleSchema Free has one disclosed vulnerability in the WordSec catalog, all reported in 2024; it remains unpatched as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for SimpleSchema Free has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2024.
All of these findings were reported by SOPROBRO. SimpleSchema Free is installed on roughly 20 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 4.3.34.
CVE-2024-53771SimpleSchema <= 1.7.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records
SimpleSchema Free
Author
sergiomico
EN: This microdata insertion shortcode tool prevents the WordPress built-in TinyMCE content editor removing microdata when you change post content editor view from code text to visual. ES: Esta herramienta shortcode para inserción de microdatos evita que el editor de contenidos TinyMCE incorporado en WordPress elimine los microdatos cuando cambias la vista del contenido del post de vista de código a vista visual. You should read Changelog and Other notes tabs. Examples Widgets availables: SimpleSchema LocalBusiness Schema. SimpleSchema LocalBusiness Services Schema (admits Services and Areas served). Shortcode examples: Since version 1.2: Example with [meta_geo_coordinates] [meta_geo_coordinates lat="39.321123" lon="0.654987" /] will return <div itemscope="" itemprop="geo" itemtype="http://schema.org/GeoCoordinates"> <meta itemprop="lat" content="39.321123"> <meta itemprop="lon" content="0.654987"> </div> Example with [meta_blog_posting] [meta_blog_posting /] will return <div itemscope="" itemtype="http://schema.org/blogPosting"> <meta itemprop="headline" content="$the_post_title"> <meta itemprop="datePublished" content="$the_post_date_Y_m_d"> <meta itemprop="image" content="$the_post_thumbnail_image_url"> </div> Since version 1.1: Example 1: [keywords][/keywords] [keywords]Cars[/keywords] will return: <strong itemprop="keywords">Cars</strong> Example 2: [keywords tag=”HTMLtag“][/keywords] [keywords tag=h2]Cars[/keywords] will return: <h2 itemprop="keywords">Cars</h2> Example 3: [itemprop][/itemprop] [itemprop name="name"]LocalBusiness Name[/itemprop] will return: <meta itemprop="name" content="LocalBusiness Name"/> Example 4: [itemprop tag=”HTMLtag“][/itemprop] [itemprop name="name" tag="h1"]LocalBusiness Name[/itemprop] will return: <h1 itemprop="name">LocalBusiness Name</h1> Example 4: [itemscope itemprop=”Its itemprop, if needed” itemtype=”Its schema name“][/itemscope] [itemscope itemprop="owns" itemtype="Product"][itemprop name="name" tag="h2"][keywords]Cars[/keywords][/itemprop][/itemscope] will return: <h1 itemprop="name">LocalBusiness Name</h1> Complete example: parent itemscope wrapping itemscope childs [itemscope itemtype="LocalBusiness" tag="div" start /] [itemprop name="name" tag="h1"][keywords]LocalBusiness Name[/keywords][/itemprop] [itemscope itemprop="owns" itemtype="Product"][itemprop name="name" tag="h2"][keywords]Cars[/keywords][/itemprop][/itemscope] [itemscope itemprop="owns" itemtype="Product"][itemprop name="name" tag="h2"][keywords]Motorcycles[/keywords][/itemprop][/itemscope] Email: <a href="mailto:business@email.com">[itemprop name="email" tag="em"]business@email.com[/itemprop]</a> Telephone: <a href="tel:+1-800-000-000">[itemprop name="telephone" tag="strong"]+1-800-000-000[/itemprop]</a> [itemscope tag="div" end /] or [is itemtype="LocalBusiness" tag="div" start /] [ip name="name" tag="h1"][keywords]LocalBusiness Name[/keywords][/ip] [is itemprop="owns" itemtype="Product"][ip name="name" tag="h2"][kw]Cars[/kw][/ip][/is] [is itemprop="owns" itemtype="Product"][ip name="name" tag="h2"][kw]Motorcycles[/kw][/ip][/is] Email: <a href="mailto:business@email.com">[ip name="email" tag="em"]business@email.com[/ip]</a> Telephone: <a href="tel:+1-800-000-000">[ip name="telephone" tag="strong"]+1-800-000-000[/ip]</a> [is tag="div" end /] will return: <div itemscope="" itemtype="http://schema.org/LocalBusiness"> <h1 itemprop="name"><strong itemprop="keywords">LocalBusiness Name</strong></h1> <div itemscope="" itemprop="owns" itemtype="http://schema.org/Product"><h2 itemprop="name"><strong itemprop="keywords">Cars</strong></h2></div> <div itemscope="" itemprop="owns" itemtype="http://schema.org/Product"><h2 itemprop="name"><strong itemprop="keywords">Motorcycles</strong></h2></div> Email: <a href="mailto:business@email.com"><em itemprop="email">business@email.com</em></a><br> Telephone: <a href="tel:+1-800-000-000"><strong itemprop="telephone">+1-800-000-000</strong></a> </div>
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C