Schema App Structured Data Plugin Missing Authorization Vulnerability Allowing Exploitation of Access Control Security Levels

A missing authorization vulnerability has been identified in the Schema App Structured Data WordPress plugin, affecting versions through 1.23.1. This vulnerability allows exploitation of incorrectly configured access control security levels, potentially enabling unauthorized users to perform actions reserved for higher privileges.

Impact

Exploitation of this vulnerability could lead to broken access control, allowing unauthorized users to execute actions with elevated privileges.

Remediation

Users of the Schema App Structured Data WordPress plugin should update to version 1.23.2 or later. Patchstack users can enable auto-update for vulnerable plugins.