CVE-2026-9067criticalCWE-434

CVE-2026-9067: fallo crítico en Schema & Structured Data for WP & AMP

Schema & Structured Data for WP & AMP < 1.60 - Unauthenticated Arbitrary Media Upload

Publicada el

Seguir esta CVE+ Monitorear Schema & Structured Data for WP & AMP

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

48Vexday Risk Score

Sin señal de explotación. Ella tiene prueba de concepto pública.

ssvc Attendcvss 9.1epss 0.6%
de la publicación al armael mismo día
Publicada en NVD10 jun
1ª PoC10 jun
The Schema & Structured Data for WP & AMP WordPress plugin before 1.60 does not check user capabilities on its frontend AJAX file-upload handlers and does not validate the actual content of uploaded files against the endpoint's intended media type, allowing unauthenticated users to upload any file type accepted by WordPress's media library through endpoints that should only accept images or videos.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Productos afectados
Unknown · Schema & Structured Data for WP & AMP
⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
CVEs relacionadas — Schema & Structured Data for WP & AMP

En el mismo producto, de las más peligrosas a las menos.

CVE-2026-119034MEDIUMSchema & Structured Data for WP & AMP < 1.70 - Unauthenticated Non-Public Comment Disclosure via Review FilterEPSS 0.3%CVE-2026-82124MEDIUMSchema & Structured Data for WP & AMP < 1.66 - Unauthenticated Password-Protected Post Content Disclosure via JSON-LD Schema OutputEPSS 0.3%CVE-2026-119035MEDIUMSchema & Structured Data for WP & AMP < 1.70 - Contributor+ Stored XSS via JSON-LD Pretty PrintEPSS 0.3%CVE-2026-82125MEDIUMSchema & Structured Data for WP & AMP 1.46 - 1.65 - Unauthenticated Non-Public Comment Content Disclosure via IDOREPSS 0.3%CVE-2026-82126LOWSchema & Structured Data for WP & AMP 1.63 - 1.65 - Contributor+ Non-Public Post Content Disclosure via AI Schema GenerationEPSS 0.3%CVE-2025-9512MEDIUMSchema & Structured Data for WP & AMP < 1.50 - Unauthenticated Stored-XSSEPSS 0.3%