Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 15 Nov 2026 06:08:40 +0000 CVE-2026-119034 — Schema & Structured Data for WP & AMP < 1.70 - Unauthenticated Non-Public Comment Disclosure via Review Filter https://db.gcve.eu/vuln/cve-2026-119034 <p><strong>Affected:</strong> Unknown Schema &amp; Structured Data for WP &amp; AMP</p> <p>The Schema &amp; Structured Data for WP &amp; AMP WordPress plugin before 1.70 does not verify that a post is publicly viewable before returning its approved comments through the review feature, allowing unauthenticated attackers to read approved comments on private, draft and password-protected posts, and to retrieve approved comments site-wide.</p> <p><strong>Affected:</strong> Unknown Schema &amp; Structured Data for WP &amp; AMP</p> <p>The Schema &amp; Structured Data for WP &amp; AMP WordPress plugin before 1.70 does not verify that a post is publicly viewable before returning its approved comments through the review feature, allowing unauthenticated attackers to read approved comments on private, draft and password-protected posts, and to retrieve approved comments site-wide.</p> https://db.gcve.eu/vuln/cve-2026-119034