本页列出影响 brainstormforce schema 的已公开 CVE 漏洞（通过 NVD CPE 关联）。每行包含严重程度评分、摘要与发布日期，便于识别与分析安全问题。
| CVE | 摘要 | 来源 | 最高 CVSS | EPSS % | 公开时间 | 更新时间 |
|---|---|---|---|---|---|---|
| CVE-2024-1564 | The wp-schema-pro WordPress plugin before 2.7.16 does not validate post access allowing a contributor user to access custom fields on any post regardless of post type or status via a shortcode | [email protected] | 4.3 | 0.45% | 2024-03-25 | 2026-06-17 |
| CVE-2023-36682 | Cross-Site Request Forgery (CSRF) vulnerability in Brainstorm Force US LLC Schema Pro allows Cross Site Request Forgery.This issue affects Schema Pro: from n/a through 2.7.7. | [email protected] | 7.1 | 0.17% | 2023-11-30 | 2026-06-17 |
| CVE-2023-25058 | Cross-Site Request Forgery (CSRF) vulnerability in Brainstorm Force Schema – All In One Schema Rich Snippets plugin <= 1.6.5 versions. | [email protected] | 4.3 | 0.26% | 2023-05-26 | 2026-06-17 |
| CVE-2018-20977 | The all-in-one-schemaorg-rich-snippets plugin before 1.5.0 for WordPress has XSS on the settings page. | [email protected] | 6.1 | 0.90% | 2019-08-21 | 2026-06-16 |