Schema and Structured Data for WordPress and AMP Missing Authorization Vulnerability in reCaptcha Key Modification

A vulnerability exists in the Schema & Structured Data for WP & AMP plugin for WordPress, in all versions through 1.26. The issue arises from a lack of proper capability checks in the 'saswp_reviews_form_render' function, allowing authenticated attackers with contributor access or higher to unauthorizedly modify the plugin's reCaptcha site and secret keys. This could disrupt the functionality of reCaptcha on the site.

Impact

Exploitation of this vulnerability could lead to unauthorized changes in reCaptcha settings, potentially causing reCaptcha to malfunction or be bypassed.

Remediation

Users can update to version 1.27 or a newer patched version to address this vulnerability.