WordPress Plugin Vulnerabilities

Schema & Structured Data for WP & AMP < 1.70 - Unauthenticated Non-Public Comment Disclosure via Review Filter

Description

The plugin does not verify that a post is publicly viewable before returning its approved comments through the review feature, allowing unauthenticated attackers to read approved comments on private, draft and password-protected posts, and to retrieve approved comments site-wide.

Proof of Concept

Affects Plugins

Plugin icon
schema-and-structured-data-for-wp
Fixed in 1.70

References

CVE
CVE-2026-119034

Classification

Type
SENSITIVE DATA DISCLOSURE
OWASP top 10
A3: Sensitive Data Exposure
CWE
CWE-200
CVSS
5.3 (medium)

Miscellaneous

Original Researcher
Karthik Ramakrishnan
Submitter
Karthik Ramakrishnan
Verified
Yes
WPVDB ID
fc30c9de-6c32-4235-abef-625ebf4cc1b0

Timeline

Publicly Published
2026-11-09 (about 2 days ago)
Added
2026-11-09 (about 1 day ago)
Last Updated
2026-11-09 (about 1 day ago)

Other

Published
Title
Published
2026-10-05
Title
Snapshotify – All-in-One Backup & Restore & Migrate < 1.3.7 - Unauthenticated Information Exposure
Published
2022-05-18
Title
Log WP_Mail <= 0.1 - Email Logs Publicly Accessible
Published
2024-06-06
Title
FileOrganizer < 1.0.8 - Sensitive Information Exposure via Directory Listing
Published
2026-10-30
Title
Flexible Chat – AI chatbot plugin for WordPress and WooCommerce < 1.1.1 - Unauthenticated Information Exposure
Published
2025-04-01
Title
WP-LESS < 1.9.7 - Unauthenticated Sensitive Information Disclosure