Schema Pro

Schema Pro has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2024; all 3 are fixed as of September 2026. Their average CVSS score is 5.4, and the most serious one scores 6.5 out of 10. 2023 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (33%). Other recurring categories include Incorrect Authorization, Missing Authorization.

Every one of the 3 issues recorded for Schema Pro has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, most of them (2) reported by Rafie Muhammad.

Strategic Overview

Avg CVSSMedium

5.4/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Schema Pro vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.5CVE-2023-36682

Schema Pro <= 2.7.7 - Cross-Site Request Forgery

Read the full analysis

Vulnerability Records

3 records


2024-03-04 00:00	Schema Pro <= 2.7.15 - Authenticated (Contributor+) Custom Field Access Schema Pro <= 2.7.15	`CVE-2024-1564`	4.3 Medium	Scott Kingsley Clark	Yes
2023-07-27 00:00	Schema Pro <= 2.7.8 - Authenticated(Contributor+) Missing Authorization Schema Pro <= 2.7.8	`CVE-2023-36683`	5.4 Medium	Rafie Muhammad	Yes
2023-07-21 00:00	Schema Pro <= 2.7.7 - Cross-Site Request Forgery Schema Pro <= 2.7.7	`CVE-2023-36682`	6.5 Medium	Rafie Muhammad	Yes

Showing 1–3 of 3 reports