Schema & Structured Data for WP & AMP < 1.70 - Authenticated Arbitrary Post Modification via Backup Import

Description

The plugin does not check that the importing user may edit the posts named in a settings backup, nor restrict the import to its own post types, allowing users whose role an administrator has granted access to the plugin's settings to modify, re-author, unpublish or trash any post or page on the site and write arbitrary post meta.