CVE-2024-49683mediumCWE-862

CVE-2024-49683: falha de média gravidade em Magazine3 Schema & Structured Data for WP & AMP

WordPress Schema & Structured Data for WP & AMP plugin <= 1.3.5 - Sensitive Data Exposure vulnerability

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Schema & Structured Data for WP & AMP

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 5.3epss 0.3%
Missing Authorization vulnerability in Magazine3 Schema & Structured Data for WP & AMP schema-and-structured-data-for-wp allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Schema & Structured Data for WP & AMP: from n/a through <= 1.3.5.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Produtos afetados
Magazine3 · Schema & Structured Data for WP & AMP
CVEs relacionadas — Magazine3 Schema & Structured Data for WP & AMP

No mesmo produto, das mais perigosas para as menos.

CVE-2024-22146MEDIUMWordPress Schema & Structured Data for WP & AMP Plugin <= 1.25 is vulnerable to Cross Site Scripting (XSS)EPSS 0.3%CVE-2023-51677MEDIUMWordPress Schema & Structured Data for WP & AMP Plugin <= 1.23 is vulnerable to Cross Site Scripting (XSS)EPSS 0.3%CVE-2026-97291HIGHWordPress Schema & Structured Data for WP & AMP plugin <= 1.66 - PHP Object Injection vulnerabilityEPSS 0.3%