Threats tagged 'ghsa-3r7q-r5gc-m6xv'

The Schema & Structured Data for WP & AMP WordPress plugin versions prior to 1.70 contain an authorization flaw that allows users with the Contributor role or higher, if granted access to the plugin, to modify structured data settings of posts they do not own. This occurs because the plugin does not verify whether the user has permission to edit the post before allowing changes to its structured data.