Vulnerabilities > CVE-2024-0893 - Missing Authorization vulnerability in Schemaapp Schema APP Structured Data

047910
CVSS 4.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
NONE
Integrity impact
LOW
Availability impact
NONE
network
low complexity
schemaapp
CWE-862
NVD
Published: 2024-05-24
Updated: 2025-04-04

Summary

The Schema App Structured Data plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the MarkupUpdate function in all versions up to, and including, 2.1.0. This makes it possible for authenticated attackers, with subscriber access or higher, to update or delete post metadata.

Vulnerable Configurations

Part Description Count
Application
Schemaapp
1

Common Weakness Enumeration (CWE)

References