5.3
Medium
CVE-2026-82125 The Schema & Structured Data for WP & AMP WordPress plugin before 1.66 does not correctly verify the ownership or the…
Description
The Schema & Structured Data for WP & AMP WordPress plugin before 1.66 does not correctly verify the ownership or the moderation status of a comment before returning its content, allowing unauthenticated users to read the content of comments still awaiting moderation or marked as spam.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Schema & Structured Data for WP & AMP 1.46 | 1.46 → < 1.66 | 1.66 |
Other CVEs of Schema & Structured Data for WP & AMP
The 6 CVEs of Schema & Structured Data for WP & AMP →
CVE-2026-82127
The Schema & Structured Data for WP & AMP WordPress plugin before 1.67 does not perform a capability check when saving…
3.5
Low
CVE-2026-82126
The Schema & Structured Data for WP & AMP WordPress plugin before 1.66 does not check that a user is allowed to edit the…
2.7
Low
CVE-2026-82124
The Schema & Structured Data for WP & AMP WordPress plugin before 1.66 does not check whether a post is password…
5.3
Medium
CVE-2026-9067
The Schema & Structured Data for WP & AMP WordPress plugin before 1.60 does not check user capabilities on its…
9.1
Critical