CVE-2026-119033 | BDVDB-2026-404790 Detail
Schema & Structured Data for WP & AMP
Description#
The Schema & Structured Data for WP & AMP WordPress plugin before 1.70 does not verify that a user may edit a post before letting them change that post's structured data settings, allowing users with the Contributor role and above, when an administrator has granted them access to the Schema & Structured Data for WP & AMP WordPress plugin before 1.70, to disable, alter or reset the structured data of posts they do not own.
Impact#
No impact statement in the source data.
Weaknesses#
- CWE-639 Authorization Bypass Through User-Controlled Key
References#
Exploit#
History#
- Version 1Record published in the CVE List.