Advisories · Technology

WPDeveloper SchedulePress.

Every CVE that names WPDeveloper SchedulePress among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-114120 CVE record

CVSS 5.3 Medium

SchedulePress before 5.3.5 Missing Authorization via wpsp_el_editor_form AJAX Action
- WPDeveloper SchedulePress
- Broken access control
Not analysed yet 21 Oct 2026
CVE-2024-32717 CVE record

CVSS 6.5 Medium

WordPress SchedulePress plugin <= 5.0.8 - Broken Access Control vulnerability
- WPDeveloper SchedulePress
- Broken access control
Not analysed yet 9 May 2024