Threats tagged 'ghsa-8wcg-mf5g-pxjv'

The Schema & Structured Data for WP & AMP WordPress plugin versions prior to 1.70 contain a vulnerability where the plugin does not verify if the importing user has permission to edit posts referenced in a settings backup. This flaw allows users with access to the plugin's settings to modify, re-author, unpublish, trash any post or page, and write arbitrary post metadata on the site.