medium5.3
CVE-2026-82124
The Schema & Structured Data for WP & AMP WordPress plugin before 1.66 does not check whether a post is password protected before including its content in the …
Impact
The Schema & Structured Data for WP & AMP WordPress plugin before 1.66 does not check whether a post is password protected before including its content in the structured data it generates, allowing unauthenticated users to obtain the content of password protected posts via more than one public output route.
Affected products
| Product | Affected versions |
|---|---|
| Schema & Structured Data For WP & AMP WordPress Plugin | before 1.66 |
Versions were read from the advisory text. No structured product data has been published for this record yet.