WordPress Review Schema Plugin Sensitive Data Exposure Vulnerability

A vulnerability allowing the exposure of sensitive system information has been identified in the WordPress Review Schema plugin, specifically in versions through 2.2.6. This issue arises from the plugin's review-schema component, which improperly handles embedded sensitive data, potentially allowing unauthorized access to information that should be restricted.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive information, which could then be used to exploit other weaknesses within the system.

Remediation

Users of the WordPress Review Schema plugin should update to version 2.2.7 or later to address this vulnerability. Patchstack users can enable auto-update for vulnerable plugins.