Advisories · Technology

magazine3 Schema & Structured Data for WP & AMP.

Every CVE that names magazine3 Schema & Structured Data for WP & AMP among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-96570 CVE record

CVSS 7.2 High

Schema & Structured Data for WP & AMP <= 1.67 - Unauthenticated Stored Cross-Site Scripting via 'saswp_review_text' Parameter
- magazine3 Schema & Structured Data for WP & AMP
- Cross-site scripting (XSS)
Not analysed yet 16 Oct 2026
CVE-2026-97291 CVE record

CVSS 8.8 High

WordPress Schema & Structured Data for WP & AMP plugin <= 1.66 - PHP Object Injection vulnerability
- Magazine3 Schema & Structured Data for WP & AMP
- Insecure deserialization
Not analysed yet 30 Sept 2026
CVE-2025-14069 CVE record

CVSS 6.4 Medium

Schema & Structured Data for WP & AMP <= 1.54 - Authenticated (Contributor+) Stored Cross-Site Scripting via User Custom Schema
- magazine3 Schema & Structured Data for WP & AMP
- Cross-site scripting (XSS)
Not analysed yet 23 Jan 2026
CVE-2025-11502 CVE record

CVSS 6.4 Medium

Schema & Structured Data for WP & AMP <= 1.51 - Authenticated (Contributor+) Stored Cross-Site Scripting
- magazine3 Schema & Structured Data for WP & AMP
- Cross-site scripting (XSS)
Not analysed yet 1 Nov 2025
CVE-2024-49683 CVE record

CVSS 5.3 Medium

WordPress Schema & Structured Data for WP & AMP plugin <= 1.3.5 - Sensitive Data Exposure vulnerability
- Magazine3 Schema & Structured Data for WP & AMP
- Broken access control
Not analysed yet 24 Oct 2024
CVE-2024-5582 CVE record

CVSS 6.4 Medium

Schema & Structured Data for WP & AMP <= 1.33 - Authenticated (Contributor+) Stored Cross-Site Scripting via url Attribute
- magazine3 Schema & Structured Data for WP & AMP
- Cross-site scripting (XSS)
Not analysed yet 17 Jul 2024
CVE-2024-3491 CVE record

CVSS 6.4 Medium

Schema & Structured Data for WP & AMP <= 1.29 - Authenticated (Contributor+) Stored Cross-Site Scripting via How To and FAQ Blocks
- magazine3 Schema & Structured Data for WP & AMP
- Cross-site scripting (XSS)
Not analysed yet 23 Apr 2024
CVE-2024-1288 CVE record

CVSS 4.3 Medium

Schema & Structured Data for WP & AMP <= 1.26 - Missing Authorization to reCaptcha Key Modification
- magazine3 Schema & Structured Data for WP & AMP
- Broken access control
Not analysed yet 20 Feb 2024
CVE-2024-1586 CVE record

CVSS 6.4 Medium

Schema & Structured Data for WP & AMP <= 1.26 - Authenticated (Custom) Stored Cross-Site Scripting
- magazine3 Schema & Structured Data for WP & AMP
- Cross-site scripting (XSS)
Not analysed yet 20 Feb 2024
CVE-2023-51677 CVE record

CVSS 6.5 Medium

WordPress Schema & Structured Data for WP & AMP Plugin <= 1.23 is vulnerable to Cross Site Scripting (XSS)
- Magazine3 Schema & Structured Data for WP & AMP
- Cross-site scripting (XSS)
Not analysed yet 1 Feb 2024
CVE-2024-22146 CVE record

CVSS 6.5 Medium

WordPress Schema & Structured Data for WP & AMP Plugin <= 1.25 is vulnerable to Cross Site Scripting (XSS)
- Magazine3 Schema & Structured Data for WP & AMP
- Cross-site scripting (XSS)
Not analysed yet 31 Jan 2024