What is GHSA-2q2q-2698-cw2q?

GHSA-2q2q-2698-cw2q is a security advisory published by GitHub Security Advisories with Medium severity. The Schema \u0026 Structured Data for WP \u0026 AMP WordPress plugin before 1.66 does not check whether a...

Which CVE IDs does GHSA-2q2q-2698-cw2q cover?

GHSA-2q2q-2698-cw2q covers the following CVE IDs: CVE-2026-82124. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-2q2q-2698-cw2q?

GHSA-2q2q-2698-cw2q has a CVSS v3 base score of 5.3, published by GitHub Security Advisories.

GHSA-2q2q-2698-cw2qMediumCVSS 5.3

The Schema & Structured Data for WP & AMP WordPress plugin before 1.66 does not check whether a...

Vendor

GitHub Security Advisories

Published

September 16, 2026

Last Modified

September 17, 2026

🔗 CVE IDs covered (1)

CVE-2026-82124 →

📋 Description

The Schema & Structured Data for WP & AMP WordPress plugin before 1.66 does not check whether a post is password protected before including its content in the structured data it generates, allowing unauthenticated users to obtain the content of password protected posts via more than one public output route.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-82124
https://wpscan.com/vulnerability/16c65787-c43a-42c6-94b8-5f748a1b0b25
https://github.com/advisories/GHSA-2q2q-2698-cw2q