{"affected":[{"defaultStatus":"unaffected","product":"Schema & Structured Data for WP & AMP","source":"CNA: WPScan","vendor":"Unknown","versions":[{"lessThan":"1.70","status":"affected","version":"0","versionType":"semver"}]}],"cveId":"CVE-2026-119033","cwes":["CWE-639"],"description":"The Schema & Structured Data for WP & AMP WordPress plugin before 1.70 does not verify that a user may edit a post before letting them change that post's structured data settings, allowing users with the Contributor role and above, when an administrator has granted them access to the Schema & Structured Data for WP & AMP WordPress plugin before 1.70, to disable, alter or reset the structured data of posts they do not own.","epss":null,"exploits":[{"kind":"exploit","source":"CNA: WPScan","url":"https://wpscan.com/vulnerability/0156d20c-90a0-4567-bee4-cbab31bf4c71/"}],"kev":null,"metrics":[],"modifiedAt":1794376809369,"publishedAt":1794376809369,"references":[{"source":"CNA: WPScan","tags":["exploit","vdb-entry","technical-description"],"url":"https://wpscan.com/vulnerability/0156d20c-90a0-4567-bee4-cbab31bf4c71/"}],"remediation":[],"revision":"382b97a371f1e95761d99524d46cb4ca1525ce814fea0bbc91fa10e4014d96bb","sources":[{"modifiedAt":1794376809369,"name":"CNA: WPScan","retrievedAt":1794377380509,"url":"https://www.cve.org/CVERecord?id=CVE-2026-119033"}],"ssvc":null,"status":"published","title":"Schema & Structured Data for WP & AMP < 1.70 - Contributor+ Structured Data Modification of Other Users' Posts via IDOR","updatedAt":1794377380509}