VYPR

Review Schema

by WordPress

Source repositories

CVEs (2)

  • CVE-2025-1707HigMar 11, 2025
    risk 0.50cvss 8.8epss 0.01

    The Review Schema plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.2.4 via post meta. This makes it possible for authenticated attackers, with contributor-level and above permissions, to include and execute arbitrary files on the…

  • CVE-2026-25344MedMar 25, 2026
    risk 0.42cvss 6.5epss 0.00

    Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in RadiusTheme Review Schema review-schema allows Retrieve Embedded Sensitive Data.This issue affects Review Schema: from n/a through <= 2.2.6.