CVE-2026-119032 | BDVDB-2026-404789 Detail

Description#

The Schema & Structured Data for WP & AMP WordPress plugin before 1.70 does not check that the importing user may edit the posts named in a settings backup, nor restrict the import to its own post types, allowing users whose role an administrator has granted access to the Schema & Structured Data for WP & AMP WordPress plugin before 1.70's settings to modify, re-author, unpublish or trash any post or page on the site and write arbitrary post meta.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12026-11-11Record published in the CVE List.