CVE-2026-119032
Schema & Structured Data for WP & AMP < 1.70 - Authenticated Arbitrary Post Modification via Backup Import
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The Schema & Structured Data for WP & AMP WordPress plugin before 1.70 does not check that the importing user may edit the posts named in a settings backup, nor restrict the import to its own post types, allowing users whose role an administrator has granted access to the Schema & Structured Data for WP & AMP WordPress plugin before 1.70's settings to modify, re-author, unpublish or trash any post or page on the site and write arbitrary post meta.
| Vendor | unknown |
| Product | schema & structured data for wp & amp |
| Published | Nov 11, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown schema & structured data for wp & amp
Be the first to know when new unknown vulnerabilities affecting unknown schema & structured data for wp & amp are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / Schema & Structured Data for WP & AMP
0 < 1.70
References
Credits
Raphael P. Cigana WPScan