WordPress Plugin Vulnerabilities

SchemaEngine AI – AI Schema Markup, Reviews & Rich Snippets for SEO 3.1.0 - Missing Authorization

Description

The SchemaEngine AI – AI Schema Markup, Reviews & Rich Snippets for SEO plugin for WordPress is vulnerable to unauthorized access in all versions up to 3.1.0. This is due to a missing capability check on a function. This makes it possible for unauthenticated attackers to perform an unauthorized action.

Affects Plugins

Fixed in 3.1.1

References

Classification

Type
NO AUTHORISATION
CWE

Miscellaneous

Original Researcher
Brobicho
Verified
No

Timeline

Publicly Published
2026-10-01 (about 15 days ago)
Added
2026-10-09 (about 8 days ago)
Last Updated
2026-10-09 (about 8 days ago)

Other