CVE-2026-82124
Schema & Structured Data for WP & AMP < 1.66 - Unauthenticated Password-Protected Post Content Disclosure via JSON-LD Schema Output
CVSS Score
5.3
EPSS Score
0.2%
EPSS Percentile
9th
The Schema & Structured Data for WP & AMP WordPress plugin before 1.66 does not check whether a post is password protected before including its content in the structured data it generates, allowing unauthenticated users to obtain the content of password protected posts via more than one public output route.
| Vendor | unknown |
| Product | schema & structured data for wp & amp |
| Published | Sep 16, 2026 |
| Last Updated | Sep 17, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown schema & structured data for wp & amp
Be the first to know when new medium vulnerabilities affecting unknown schema & structured data for wp & amp are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / Schema & Structured Data for WP & AMP
0 < 1.66
References
Credits
Revanth Hari Narayana Matte WPScan