CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
What the vulnerability does
Missing Authorization vulnerability in Magazine3 Schema & Structured Data for WP & AMP schema-and-structured-data-for-wp allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Schema & Structured Data for WP & AMP: from n/a through <= 1.3.5.
Explanation of Vulnerability in Simple Terms
The Schema & Structured Data for WP & AMP plugin through version 1.3.5 fails to properly restrict access to sensitive functions. An unauthenticated attacker can read non-public data without needing to log in or interact with a site administrator. Update to a version newer than 1.3.5 to resolve this issue.
What an attacker can do
Read non-public data from the site without authentication.
Potential impact on your site
Sensitive site data may be exposed to anyone on the internet without your knowledge.
Conditions required to exploit
Network access to the site; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
