What is GHSA-3rgj-f6h6-r4h8?

GHSA-3rgj-f6h6-r4h8 is a security advisory published by GitHub Security Advisories with Low severity. The Schema \u0026 Structured Data for WP \u0026 AMP WordPress plugin before 1.66 does not check that a user...

Which CVE IDs does GHSA-3rgj-f6h6-r4h8 cover?

GHSA-3rgj-f6h6-r4h8 covers the following CVE IDs: CVE-2026-82126. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-3rgj-f6h6-r4h8?

GHSA-3rgj-f6h6-r4h8 has a CVSS v3 base score of 2.7, published by GitHub Security Advisories.

GHSA-3rgj-f6h6-r4h8LowCVSS 2.7

The Schema & Structured Data for WP & AMP WordPress plugin before 1.66 does not check that a user...

Vendor

GitHub Security Advisories

Published

September 16, 2026

Last Modified

September 17, 2026

🔗 CVE IDs covered (1)

CVE-2026-82126 →

📋 Description

The Schema & Structured Data for WP & AMP WordPress plugin before 1.66 does not check that a user is allowed to edit the specific post they request schema generation for, allowing users with the contributor role and above to obtain the content of other users' draft, pending, private and password protected posts.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-82126
https://wpscan.com/vulnerability/c6476bdd-1360-449f-b7be-6c532efe9de9
https://github.com/advisories/GHSA-3rgj-f6h6-r4h8