What is GHSA-44gp-9hmx-cr3c?

GHSA-44gp-9hmx-cr3c is a security advisory published by GitHub Security Advisories with Medium severity. The Schema \u0026 Structured Data for WP \u0026 AMP WordPress plugin before 1.66 does not correctly verify...

Which CVE IDs does GHSA-44gp-9hmx-cr3c cover?

GHSA-44gp-9hmx-cr3c covers the following CVE IDs: CVE-2026-82125. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-44gp-9hmx-cr3c?

GHSA-44gp-9hmx-cr3c has a CVSS v3 base score of 5.3, published by GitHub Security Advisories.

GHSA-44gp-9hmx-cr3cMediumCVSS 5.3

The Schema & Structured Data for WP & AMP WordPress plugin before 1.66 does not correctly verify...

Vendor

GitHub Security Advisories

Published

September 16, 2026

Last Modified

September 17, 2026

🔗 CVE IDs covered (1)

CVE-2026-82125 →

📋 Description

The Schema & Structured Data for WP & AMP WordPress plugin before 1.66 does not correctly verify the ownership or the moderation status of a comment before returning its content, allowing unauthenticated users to read the content of comments still awaiting moderation or marked as spam.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-82125
https://wpscan.com/vulnerability/1ed1a2a1-e23d-4c4c-a933-f55b3e14ad09
https://github.com/advisories/GHSA-44gp-9hmx-cr3c