{
 "id": "WPSEC-2026-2282",
 "url": "https://wpsec.com/vuln/WPSEC-2026-2282/",
 "json_url": "https://wpsec.com/vuln/WPSEC-2026-2282/advisory.json",
 "markdown_url": "https://wpsec.com/vuln/WPSEC-2026-2282/index.md",
 "title": "SchemaEngine AI – AI Schema Markup, Reviews & Rich Snippets for SEO <= 3.1.3 - Authenticated (Contributor+) Sensitive Information Exposure via 'post_id' Shortcode Attribute",
 "description": "The review-schema plugin for WordPress is vulnerable to Sensitive Information Exposure via the 'post_id' attribute of the rtrs_faqpage shortcode in all versions up to, and including, 3.1.3. This is due to the shortcode showing the FAQ of whichever post the attribute names without checking that the post is published, publicly viewable and not password-protected, or readable by the current user. This makes it possible for authenticated attackers, with contributor-level access and above, to read the FAQ questions and answers of private, draft and password-protected posts.",
 "plugin": {
  "slug": "review-schema",
  "name": "SchemaEngine AI – AI Schema Markup, Reviews & Rich Snippets for SEO",
  "full_name": "Review Schema – Review & Structure Data Schema Plugin",
  "wordpress_org": "https://wordpress.org/plugins/review-schema/",
  "advisories_url": "https://wpsec.com/vuln/plugin/review-schema/",
  "attacksurface": "https://attacksurface.wpsec.com/plugin/review-schema"
 },
 "type": "SENSITIVE DATA DISCLOSURE",
 "cwe": [
  "CWE-200"
 ],
 "cve": [],
 "cvss": {
  "version": "3.1",
  "score": 4.3,
  "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
  "severity": "Medium"
 },
 "affected": {
  "ranges": [
   {
    "from": null,
    "from_inclusive": true,
    "to": "3.1.4",
    "to_inclusive": false
   }
  ],
  "text": [
   "all versions before 3.1.4"
  ]
 },
 "introduced_in": null,
 "fixed_in": "3.1.4",
 "remediation": "Update to 3.1.4 or later.",
 "fix_released": "2026-11-02T11:44:24+00:00",
 "published": "2026-11-03T14:48:33+00:00",
 "updated": "2026-11-03T13:23:29.752961+00:00",
 "also_published_as": null,
 "references": [
  "https://wpsec.com/vuln/WPSEC-2026-2282/",
  "https://plugins.svn.wordpress.org/review-schema/tags/3.1.4/",
  "https://wordpress.org/plugins/review-schema/"
 ],
 "attacksurface_url": "https://attacksurface.wpsec.com/plugin/review-schema",
 "source": "WPSec",
 "license": {
  "name": "CC BY 4.0",
  "url": "https://creativecommons.org/licenses/by/4.0/"
 },
 "usage": {
  "plugin": "Low",
  "affected_versions": "Low",
  "as_of": "2026-11-03"
 }
}