What is GHSA-3r7q-r5gc-m6xv?

GHSA-3r7q-r5gc-m6xv is a security advisory published by GitHub Security Advisories with Low severity. The Schema \u0026 Structured Data for WP \u0026 AMP WordPress plugin before 1.70 does not verify that a...

Which CVE IDs does GHSA-3r7q-r5gc-m6xv cover?

GHSA-3r7q-r5gc-m6xv covers the following CVE IDs: CVE-2026-119033. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-3r7q-r5gc-m6xv?

GHSA-3r7q-r5gc-m6xv has a CVSS v3 base score of 2.2, published by GitHub Security Advisories.

GHSA-3r7q-r5gc-m6xvLowCVSS 2.2

The Schema & Structured Data for WP & AMP WordPress plugin before 1.70 does not verify that a...

Vendor

GitHub Security Advisories

Published

November 11, 2026

Last Modified

November 11, 2026

🔗 CVE IDs covered (1)

CVE-2026-119033 →

📋 Description

The Schema & Structured Data for WP & AMP WordPress plugin before 1.70 does not verify that a user may edit a post before letting them change that post's structured data settings, allowing users with the Contributor role and above, when an administrator has granted them access to the Schema & Structured Data for WP & AMP WordPress plugin before 1.70, to disable, alter or reset the structured data of posts they do not own.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-119033
https://wpscan.com/vulnerability/0156d20c-90a0-4567-bee4-cbab31bf4c71
https://github.com/advisories/GHSA-3r7q-r5gc-m6xv