Advisories · Technology

Schema & Structured Data for WP & AMP.

Every CVE that names Schema & Structured Data for WP & AMP among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-119035 CVE record

CVSS 6.4 Medium

Schema & Structured Data for WP & AMP < 1.70 - Contributor+ Stored XSS via JSON-LD Pretty Print
- Schema & Structured Data for WP & AMP
- Cross-site scripting (XSS)
Not analysed yet 11 Nov 2026
CVE-2026-119034 CVE record

CVSS 5.3 Medium

Schema & Structured Data for WP & AMP < 1.70 - Unauthenticated Non-Public Comment Disclosure via Review Filter
- Schema & Structured Data for WP & AMP
- Information disclosure
Not analysed yet 11 Nov 2026
CVE-2026-119033 CVE record

CVSS 2.2 Low

Schema & Structured Data for WP & AMP < 1.70 - Contributor+ Structured Data Modification of Other Users' Posts via IDOR
- Schema & Structured Data for WP & AMP
- Broken access control
Not analysed yet 11 Nov 2026
CVE-2026-119032 CVE record

CVSS 5.3 Medium

Schema & Structured Data for WP & AMP < 1.70 - Authenticated Arbitrary Post Modification via Backup Import
- Schema & Structured Data for WP & AMP
- Broken access control
Not analysed yet 11 Nov 2026
CVE-2026-82127 CVE record

CVSS 3.5 Low

Schema & Structured Data for WP & AMP < 1.67 - Editor+ Stored XSS via Taxonomy Term Fields
- Schema & Structured Data for WP & AMP
- Cross-site scripting (XSS)
Not analysed yet 30 Sept 2026
CVE-2026-82126 CVE record

CVSS 2.7 Low

Schema & Structured Data for WP & AMP 1.63 - 1.65 - Contributor+ Non-Public Post Content Disclosure via AI Schema Generation
- Schema & Structured Data for WP & AMP
- Broken access control
Not analysed yet 16 Sept 2026
CVE-2026-82125 CVE record

CVSS 5.3 Medium

Schema & Structured Data for WP & AMP 1.46 - 1.65 - Unauthenticated Non-Public Comment Content Disclosure via IDOR
- Schema & Structured Data for WP & AMP
- Broken access control
Not analysed yet 16 Sept 2026
CVE-2026-82124 CVE record

CVSS 5.3 Medium

Schema & Structured Data for WP & AMP < 1.66 - Unauthenticated Password-Protected Post Content Disclosure via JSON-LD Schema Output
- Schema & Structured Data for WP & AMP
- Information disclosure
Not analysed yet 16 Sept 2026
CVE-2026-9067 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Schema & Structured Data for WP & AMP < 1.60 - Unauthenticated Arbitrary Media Upload
- Schema & Structured Data for WP & AMP
- Unrestricted file upload
Not analysed yet 10 Jun 2026
CVE-2025-9512 CVE record

CVSS 6.1 Medium

Schema & Structured Data for WP & AMP < 1.50 - Unauthenticated Stored-XSS
- Schema & Structured Data for WP & AMP
Not analysed yet 1 Oct 2025