Stored Cross-Site Scripting Vulnerability in Schema & Structured Data for WP & AMP Plugin by WordPress

CVE-2025-14069

What is CVE-2025-14069?

The Schema & Structured Data for WP & AMP plugin for WordPress contains a vulnerability that allows authenticated users with Contributor-level access and above to perform Stored Cross-Site Scripting (XSS). This occurs through the 'saswp_custom_schema_field' profile field, where inadequate input sanitization and output escaping mechanisms let attackers inject arbitrary web scripts. Once executed, these scripts can compromise the security of pages viewed by other users, leading to potential data breaches or malware distribution.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References