5.3
Moyenne
CVE-2026-82125 The Schema & Structured Data for WP & AMP WordPress plugin before 1.66 does not correctly verify the ownership or the…
Description
The Schema & Structured Data for WP & AMP WordPress plugin before 1.66 does not correctly verify the ownership or the moderation status of a comment before returning its content, allowing unauthenticated users to read the content of comments still awaiting moderation or marked as spam.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Schema & Structured Data for WP & AMP 1.46 | 1.46 → < 1.66 | 1.66 |
Autres CVE de Schema & Structured Data for WP & AMP
Les 6 CVE de Schema & Structured Data for WP & AMP →
CVE-2026-82127
The Schema & Structured Data for WP & AMP WordPress plugin before 1.67 does not perform a capability check when saving…
3.5
Faible
CVE-2026-82126
The Schema & Structured Data for WP & AMP WordPress plugin before 1.66 does not check that a user is allowed to edit the…
2.7
Faible
CVE-2026-82124
The Schema & Structured Data for WP & AMP WordPress plugin before 1.66 does not check whether a post is password…
5.3
Moyenne
CVE-2026-9067
The Schema & Structured Data for WP & AMP WordPress plugin before 1.60 does not check user capabilities on its…
9.1
Critique