CVE-2026-82125

{"id": "CVE-2026-82125", "cveTags": [], "metrics": {}, "affected": [{"source": "contact@wpscan.com", "affectedData": [{"vendor": "Unknown", "product": "Schema & Structured Data for WP & AMP", "versions": [{"status": "affected", "version": "1.46", "lessThan": "1.66", "versionType": "semver"}], "defaultStatus": "unaffected"}]}], "published": "2026-09-16T06:16:33.270", "references": [{"url": "https://wpscan.com/vulnerability/1ed1a2a1-e23d-4c4c-a933-f55b3e14ad09/", "source": "contact@wpscan.com"}], "vulnStatus": "Deferred", "descriptions": [{"lang": "en", "value": "The Schema & Structured Data for WP & AMP WordPress plugin before 1.66 does not correctly verify the ownership or the moderation status of a comment before returning its content, allowing unauthenticated users to read the content of comments still awaiting moderation or marked as spam."}], "lastModified": "2026-09-16T20:25:29.240", "sourceIdentifier": "contact@wpscan.com"}