Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: magazine3 Component: Schema & Structured Data For Wp & Amp Clear all filters
TI-2024-05186 CVE-2024-5582 · GHSA-7v6r-4575-fvg7

Cross-site scripting in magazine3 Schema & Structured Data for WP & AMP

Priority LOW 29

The Schema & Structured Data for WP & AMP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'url' attribute within the Q&A Block widget in all versions up to, and including, 1.33 due to i…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00385 Published 2024-07-17 No fix listed CWE-79
TI-2024-01198 CVE-2024-1288 · GHSA-v49v-4cf4-4q55

Schema & Structured Data for WP & AMP <= 1.26 - Missing Authorization to reCaptcha Key Modification

Priority LOW 20

The Schema & Structured Data for WP & AMP plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'saswp_reviews_form_render' function in all versions up to, and i…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00431 Published 2024-02-20 No fix listed CWE-284
TI-2024-01480 CVE-2024-1586 · GHSA-m4mh-4hxg-cj4m

Schema & Structured Data for WP & AMP <= 1.26 - Authenticated (Custom) Stored Cross-Site Scripting

Priority LOW 29

The Schema & Structured Data for WP & AMP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the custom schema in all versions up to, and including, 1.26 due to insufficient input sanitization and outp…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00372 Published 2024-02-20 No fix listed CWE-79
TI-2024-14747 CVE-2024-22146 · GHSA-87hh-r9jv-r2jq

WordPress Schema & Structured Data for WP & AMP Plugin <= 1.25 is vulnerable to Cross Site Scripting (XSS)

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Magazine3 Schema & Structured Data for WP & AMP allows Stored XSS.This issue affects Schema & Structured Data for WP &…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0034 Published 2024-01-31 No fix listed CWE-79