Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Schema & Structured Data for WP & AMP 1.66 Clear all filters
TI-2026-56662 CVE-2026-82126 · GHSA-3rgj-f6h6-r4h8

Improper access control in Schema & Structured Data for WP & AMP

Priority LOW 13

The Schema & Structured Data for WP & AMP WordPress plugin before 1.66 does not check that a user is allowed to edit the specific post they request schema generation for, allowing users with the contributor role and abov…

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.00299 Published 2026-09-16 Fixed in 1.66 CWE-284
TI-2026-56661 CVE-2026-82125 · GHSA-44gp-9hmx-cr3c

Schema & Structured Data for WP & AMP 1.46 - 1.65 - Unauthenticated Non-Public Comment Content Disclosure via IDOR

Priority LOW 30

The Schema & Structured Data for WP & AMP WordPress plugin before 1.66 does not correctly verify the ownership or the moderation status of a comment before returning its content, allowing unauthenticated users to read th…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00323 Published 2026-09-16 Fixed in 1.66 CWE-639
TI-2026-56660 CVE-2026-82124 · GHSA-2q2q-2698-cw2q

Information disclosure in Schema & Structured Data for WP & AMP

Priority LOW 30

The Schema & Structured Data for WP & AMP WordPress plugin before 1.66 does not check whether a post is password protected before including its content in the structured data it generates, allowing unauthenticated users…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00345 Published 2026-09-16 Fixed in 1.66 CWE-200