Vulnerabilities / SchemaEngine AI – AI Schema Markup, Reviews & Rich Snippets for SEO / WPSEC-2026-2284
SchemaEngine AI – AI Schema Markup, Reviews & Rich Snippets for SEO <= 3.1.3 - Unauthenticated Limited File Upload via Review Media Upload
Low 3.7
CWE-434Fixed in 3.1.4
- ID
- WPSEC-2026-2284
- Plugin
- Review Schema – Review & Structure Data Schema Plugin (review-schema)
- Affected
- all versions before 3.1.4
- Remediation
- Update to 3.1.4 or later.
- CVSS 3.1
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
- Weakness
- CWE-434
- Usage
- Plugin Low · Affected versions Low among sites WPSec scans, 2026-11-03
- Attack surface
- SchemaEngine AI – AI Schema Markup, Reviews & Rich Snippets for SEO on WPSec AttackSurface
- Fix released
- Published
Description
The review-schema plugin for WordPress is vulnerable to limited file uploads via the rtrs_image_upload and rtrs_video_upload AJAX actions in all versions up to, and including, 3.1.3. This is due to the handlers checking only the browser-supplied MIME type and passing the file to wp_handle_upload() without limiting it to the configured image or video types. This makes it possible for unauthenticated attackers, when guest uploads are enabled, to upload any file type WordPress allows by default (such as documents or archives), rather than only the configured media types.
References
- https://wpsec.com/vuln/WPSEC-2026-2284/
- https://plugins.svn.wordpress.org/review-schema/tags/3.1.4/
- https://wordpress.org/plugins/review-schema/
Published by WPSec. Provided as is, without warranty. Corrections: contact us.
This advisory as JSON or Markdown · All advisories: JSON, RSS