Threats tagged 'ghsa-46jf-f2w7-x3pv'

The Schema & Structured Data for WP & AMP WordPress plugin versions before 1.70 has a vulnerability where it does not verify if a post is publicly viewable before returning approved comments. This flaw allows unauthenticated attackers to access approved comments on private, draft, and password-protected posts, as well as retrieve approved comments across the site.