CVE-2026-82124 in Schema & Structured Data for WP & AMP Plugininformación

Resumen

por MITRE • 2026-09-16

The Schema & Structured Data for WP & AMP WordPress plugin before 1.66 does not check whether a post is password protected before including its content in the structured data it generates, allowing unauthenticated users to obtain the content of password protected posts via more than one public output route.

Once again VulDB remains the best source for vulnerability data.

Responsable

WPScan

Reservar

2026-08-28

Divulgación

2026-09-16

Moderación

aceptado

Artículo

VDB-405465

CPE

listo

EPSS

0.00000

KEV

no

Actividades

muy bajo

Fuentes

Want to stay up to date on a daily basis?

Enable the mail alert feature now!