{"affected":[{"defaultStatus":"unaffected","product":"Schema & Structured Data for WP & AMP","source":"CNA: WPScan","vendor":"Unknown","versions":[{"lessThan":"1.70","status":"affected","version":"0","versionType":"semver"}]}],"cveId":"CVE-2026-119034","cwes":["CWE-200"],"description":"The Schema & Structured Data for WP & AMP WordPress plugin before 1.70 does not verify that a post is publicly viewable before returning its approved comments through the review feature, allowing unauthenticated attackers to read approved comments on private, draft and password-protected posts, and to retrieve approved comments site-wide.","epss":null,"exploits":[{"kind":"exploit","source":"CNA: WPScan","url":"https://wpscan.com/vulnerability/fc30c9de-6c32-4235-abef-625ebf4cc1b0/"}],"kev":null,"metrics":[],"modifiedAt":1794376809544,"publishedAt":1794376809544,"references":[{"source":"CNA: WPScan","tags":["exploit","vdb-entry","technical-description"],"url":"https://wpscan.com/vulnerability/fc30c9de-6c32-4235-abef-625ebf4cc1b0/"}],"remediation":[],"revision":"9a787a8b2b176b72fe79aa16d8416e2fa8a2a1037a35dfae45ea17a7394de620","sources":[{"modifiedAt":1794376809544,"name":"CNA: WPScan","retrievedAt":1794377381624,"url":"https://www.cve.org/CVERecord?id=CVE-2026-119034"}],"ssvc":null,"status":"published","title":"Schema & Structured Data for WP & AMP < 1.70 - Unauthenticated Non-Public Comment Disclosure via Review Filter","updatedAt":1794377381624}