Vulnerabilities / SchemaEngine AI – AI Schema Markup, Reviews & Rich Snippets for SEO / WPSEC-2026-2282
SchemaEngine AI – AI Schema Markup, Reviews & Rich Snippets for SEO <= 3.1.3 - Authenticated (Contributor+) Sensitive Information Exposure via 'post_id' Shortcode Attribute
Medium 4.3
CWE-200Fixed in 3.1.4
- ID
- WPSEC-2026-2282
- Plugin
- Review Schema – Review & Structure Data Schema Plugin (review-schema)
- Affected
- all versions before 3.1.4
- Remediation
- Update to 3.1.4 or later.
- CVSS 3.1
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
- Weakness
- CWE-200
- Usage
- Plugin Low · Affected versions Low among sites WPSec scans, 2026-11-03
- Attack surface
- SchemaEngine AI – AI Schema Markup, Reviews & Rich Snippets for SEO on WPSec AttackSurface
- Fix released
- Published
Description
The review-schema plugin for WordPress is vulnerable to Sensitive Information Exposure via the 'post_id' attribute of the rtrs_faqpage shortcode in all versions up to, and including, 3.1.3. This is due to the shortcode showing the FAQ of whichever post the attribute names without checking that the post is published, publicly viewable and not password-protected, or readable by the current user. This makes it possible for authenticated attackers, with contributor-level access and above, to read the FAQ questions and answers of private, draft and password-protected posts.
References
- https://wpsec.com/vuln/WPSEC-2026-2282/
- https://plugins.svn.wordpress.org/review-schema/tags/3.1.4/
- https://wordpress.org/plugins/review-schema/
Published by WPSec. Provided as is, without warranty. Corrections: contact us.
This advisory as JSON or Markdown · All advisories: JSON, RSS