Unauthorized Access in Schema & Structured Data for WP & AMP Plugin by WordPress
CVE-2026-82126
Currently unrated
Key Information:
- Vendor
WordPress
- Vendor
- CVE Published:
- 16 September 2026
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2026-82126?
The Schema & Structured Data for WP & AMP plugin for WordPress is vulnerable due to inadequate permissions management. This flaw permits users with contributor roles and above to access and retrieve the content from other users' drafts, private entries, pending posts, and password-protected content. As a result, unauthorized users may exploit this vulnerability to access sensitive information that should be restricted.
Affected Version(s)
Schema & Structured Data for WP & AMP 1.63 < 1.66
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.