Schema & Structured Data For Wp & Amp
Approved changes feed: RSS · Atom
cpe:2.3:a:unknown:schema_&_structured_data_for_wp_&_amp:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Unknown (668ca391-a6cc-5e33-879b-83885214de33) |
|---|---|
| Product | Schema & Structured Data For Wp & Amp (9dfbc86c-3b40-5ad2-b604-4f256a6a63f0) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-82126 |
vulnerable | 2026-10-13 12:28:42.067846 |
Schema & Structured Data for WP & AMP 1.63 - 1.65 - Contributor+ Non-Public Post Content Disclosure via AI Schema Generation
The Schema & Structured Data for WP & AMP WordPress plugin before 1.66 does not check that a user is allowed to edit the specific post they request schema generation for, allowing users with the contributor role and above to obtain the content of other users' draft, pending, private and password protected posts.
Published: 2026-09-16T06:00:12.841Z
Updated: 2026-09-17T12:38:09.764Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-82125 |
vulnerable | 2026-10-13 12:28:41.991084 |
Schema & Structured Data for WP & AMP 1.46 - 1.65 - Unauthenticated Non-Public Comment Content Disclosure via IDOR
The Schema & Structured Data for WP & AMP WordPress plugin before 1.66 does not correctly verify the ownership or the moderation status of a comment before returning its content, allowing unauthenticated users to read the content of comments still awaiting moderation or marked as spam.
Published: 2026-09-16T06:00:12.668Z
Updated: 2026-09-17T12:38:24.648Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-82124 |
vulnerable | 2026-10-13 12:28:41.895493 |
Schema & Structured Data for WP & AMP < 1.66 - Unauthenticated Password-Protected Post Content Disclosure via JSON-LD Schema Output
The Schema & Structured Data for WP & AMP WordPress plugin before 1.66 does not check whether a post is password protected before including its content in the structured data it generates, allowing unauthenticated users to obtain the content of password protected posts via more than one public output route.
Published: 2026-09-16T06:00:12.494Z
Updated: 2026-09-17T12:38:39.622Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-9067 |
vulnerable | 2026-07-29 01:09:06.631841 |
Schema & Structured Data for WP & AMP < 1.60 - Unauthenticated Arbitrary Media Upload
The Schema & Structured Data for WP & AMP WordPress plugin before 1.60 does not check user capabilities on its frontend AJAX file-upload handlers and does not validate the actual content of uploaded files against the endpoint's intended media type, allowing unauthenticated users to upload any file type accepted by WordPress's media library through endpoints that should only accept images or videos.
Published: 2026-06-10T06:00:12.194Z
Updated: 2026-06-10T10:44:28.578Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-9512 |
vulnerable | 2026-06-08 07:45:22.596603 |
Schema & Structured Data for WP & AMP < 1.50 - Unauthenticated Stored-XSS
The Schema & Structured Data for WP & AMP WordPress plugin before 1.50 does not properly handles HTML tag attribute modifications, making it possible for unauthenticated attackers to conduct Stored XSS attacks via post comments.
Published: 2025-10-01T06:00:02.967Z
Updated: 2025-10-01T14:59:13.068Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.