High · 8.8 CVE-2026-97291 EUVD-2026-90218GHSA-x7g5-c7fw-ccq6

WordPress Schema & Structured Data for WP & AMP plugin <= 1.66 - PHP Object Injection vulnerability

Published Sep 30, 2026 · Updated Sep 30, 2026 · Assigned by Patchstack

Vendor: Magazine3 Product: Schema & Structured Data for WP & AMP

Description

Contributor PHP Object Injection in Schema & Structured Data for WP & AMP <= 1.66 versions.

Affected products

Vendor	Product	Affected	Fixed
Magazine3	Schema & Structured Data for WP & AMP	≤ 1.66	—

References

https://patchstack.com/database/wordpress/plugin/schema-and-structured-data-for-wp/vulnerability/wordpress-schema-structured-data-for-wp-amp-plugin-1-66-php-object-injection-vulnerability?_s_id=cve vdb-entry