CyberRota Analysis
AI-GeneratedThe Schema & Structured Data for WP & AMP plugin for WordPress versions prior to 1.66 is vulnerable due to inadequate access controls, allowing users with contributor roles and above to access the content of other users' draft, pending, private, and password-protected posts. This exposure can lead to unauthorized information disclosure, compromising user privacy and content confidentiality. WordPress site administrators and developers using this plugin should prioritize updating to the latest version to mitigate potential risks.
Original NVD Description
The Schema & Structured Data for WP & AMP WordPress plugin before 1.66 does not check that a user is allowed to edit the specific post they request schema generation for, allowing users with the contributor role and above to obtain the content of other users' draft, pending, private and password protected posts.