CVE-2026-82126 in Schema & Structured Data for AMP Plugininfo

Zusammenfassung

von MITRE • 16.09.2026

The Schema & Structured Data for WP & AMP WordPress plugin before 1.66 does not check that a user is allowed to edit the specific post they request schema generation for, allowing users with the contributor role and above to obtain the content of other users' draft, pending, private and password protected posts.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Zuständig

WPScan

Reservieren

28.08.2026

Veröffentlichung

16.09.2026

Moderieren

akzeptiert

Eintrag

VDB-405467

CPE

bereit

EPSS

0.00000

KEV

nein

Aktivitäten

very low

Quellen

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!