CVE Intelligence

CoSchedule vulnerabilities

🔔 Create alert RSS

Published CVEs affecting CoSchedule products: 2 record(s), with severity, exploitation and fixes.

CoSchedule 1Headline Analyzer 1

Exploited only (KEV) →

CVE-2025-62974 Medium · 6.5 CWE-79 Oct 26, 2025
WordPress Headline Analyzer plugin <= 1.3.7 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CoSchedule Headline Analyzer headline-analyzer allows Stored XSS.This issue affects Headline Analyzer: from n/a through <= 1.3.7.
CVE-2025-49913 Medium · 5.3 CWE-862 Oct 22, 2025
WordPress CoSchedule plugin <= 3.4.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in CoSchedule CoSchedule coschedule-by-todaymade allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CoSchedule: from n/a through <= 3.4.0.