CVE-2024-0893: Schema App Structured Data <= 2.2.0 - Missing Authorization
The Schema App Structured Data plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the MarkupUpdate function in all versions up to, and including, 2.2.0. This makes it possible for authenticated attackers, with subscriber access or higher, to update or delete post metadata.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-0893?
CVE-2024-0893 has a moderate severity rating due to the potential for unauthorized data modification.
How do I fix CVE-2024-0893?
To fix CVE-2024-0893, update the Schema App Structured Data plugin to version 2.2.1 or higher.
Who is affected by CVE-2024-0893?
CVE-2024-0893 affects all versions of the Schema App Structured Data plugin up to and including version 2.1.0.
What types of attacks can exploit CVE-2024-0893?
CVE-2024-0893 can be exploited by authenticated attackers with subscriber access to modify structured data.
Is there a workaround for CVE-2024-0893?
There are no official workarounds for CVE-2024-0893; the recommended mitigation is to upgrade the plugin.