cleantalk
Vulnerabilities and Security Researches

Schema App Structured Data, f7767594114ab4f30b2cf84528de542934d034ae

Published on
Sep 27, 2023
Research Description
Schema App Structured Data [schema-app-structured-data-for-schemaorg] < 1.22.4 WordPress Schema App Structured Data Plugin <= 1.22.3 is vulnerable to Broken Access Control No patched version is available. No reply from the vendor. Rio Darmawan discovered and reported this Broken Access Control vulnerability in WordPress Schema App Structured Data Plugin. A broken access control issue refers to a missing authorization, authentication or nonce token check in a function that could lead to an unprivileged user to executing a certain higher privileged action. This vulnerability has not been known to be fixed yet.
Affected versions
Min -, max 1.22.4.
Status
vulnerable