What is GHSA-46jf-f2w7-x3pv?

GHSA-46jf-f2w7-x3pv is a security advisory published by GitHub Security Advisories with Medium severity. The Schema \u0026 Structured Data for WP \u0026 AMP WordPress plugin before 1.70 does not verify that a...

Which CVE IDs does GHSA-46jf-f2w7-x3pv cover?

GHSA-46jf-f2w7-x3pv covers the following CVE IDs: CVE-2026-119034. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-46jf-f2w7-x3pv?

GHSA-46jf-f2w7-x3pv has a CVSS v3 base score of 5.3, published by GitHub Security Advisories.

GHSA-46jf-f2w7-x3pvMediumCVSS 5.3

The Schema & Structured Data for WP & AMP WordPress plugin before 1.70 does not verify that a...

Vendor

GitHub Security Advisories

Published

November 11, 2026

Last Modified

November 11, 2026

🔗 CVE IDs covered (1)

CVE-2026-119034 →

📋 Description

The Schema & Structured Data for WP & AMP WordPress plugin before 1.70 does not verify that a post is publicly viewable before returning its approved comments through the review feature, allowing unauthenticated attackers to read approved comments on private, draft and password-protected posts, and to retrieve approved comments site-wide.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-119034
https://wpscan.com/vulnerability/fc30c9de-6c32-4235-abef-625ebf4cc1b0
https://github.com/advisories/GHSA-46jf-f2w7-x3pv