What is GHSA-8wcg-mf5g-pxjv?

GHSA-8wcg-mf5g-pxjv is a security advisory published by GitHub Security Advisories with Medium severity. The Schema \u0026 Structured Data for WP \u0026 AMP WordPress plugin before 1.70 does not check that the...

Which CVE IDs does GHSA-8wcg-mf5g-pxjv cover?

GHSA-8wcg-mf5g-pxjv covers the following CVE IDs: CVE-2026-119032. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-8wcg-mf5g-pxjv?

GHSA-8wcg-mf5g-pxjv has a CVSS v3 base score of 5.3, published by GitHub Security Advisories.

GHSA-8wcg-mf5g-pxjvMediumCVSS 5.3

The Schema & Structured Data for WP & AMP WordPress plugin before 1.70 does not check that the...

Vendor

GitHub Security Advisories

Published

November 11, 2026

Last Modified

November 11, 2026

🔗 CVE IDs covered (1)

CVE-2026-119032 →

📋 Description

The Schema & Structured Data for WP & AMP WordPress plugin before 1.70 does not check that the importing user may edit the posts named in a settings backup, nor restrict the import to its own post types, allowing users whose role an administrator has granted access to the Schema & Structured Data for WP & AMP WordPress plugin before 1.70's settings to modify, re-author, unpublish or trash any post or page on the site and write arbitrary post meta.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-119032
https://wpscan.com/vulnerability/e8a5285d-5d03-4b50-8028-6c71d02e1c18
https://github.com/advisories/GHSA-8wcg-mf5g-pxjv