{
 "id": "WPSEC-2026-2284",
 "url": "https://wpsec.com/vuln/WPSEC-2026-2284/",
 "json_url": "https://wpsec.com/vuln/WPSEC-2026-2284/advisory.json",
 "markdown_url": "https://wpsec.com/vuln/WPSEC-2026-2284/index.md",
 "title": "SchemaEngine AI – AI Schema Markup, Reviews & Rich Snippets for SEO <= 3.1.3 - Unauthenticated Limited File Upload via Review Media Upload",
 "description": "The review-schema plugin for WordPress is vulnerable to limited file uploads via the rtrs_image_upload and rtrs_video_upload AJAX actions in all versions up to, and including, 3.1.3. This is due to the handlers checking only the browser-supplied MIME type and passing the file to wp_handle_upload() without limiting it to the configured image or video types. This makes it possible for unauthenticated attackers, when guest uploads are enabled, to upload any file type WordPress allows by default (such as documents or archives), rather than only the configured media types.",
 "plugin": {
  "slug": "review-schema",
  "name": "SchemaEngine AI – AI Schema Markup, Reviews & Rich Snippets for SEO",
  "full_name": "Review Schema – Review & Structure Data Schema Plugin",
  "wordpress_org": "https://wordpress.org/plugins/review-schema/",
  "advisories_url": "https://wpsec.com/vuln/plugin/review-schema/",
  "attacksurface": "https://attacksurface.wpsec.com/plugin/review-schema"
 },
 "type": "UPLOAD",
 "cwe": [
  "CWE-434"
 ],
 "cve": [],
 "cvss": {
  "version": "3.1",
  "score": 3.7,
  "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
  "severity": "Low"
 },
 "affected": {
  "ranges": [
   {
    "from": null,
    "from_inclusive": true,
    "to": "3.1.4",
    "to_inclusive": false
   }
  ],
  "text": [
   "all versions before 3.1.4"
  ]
 },
 "introduced_in": null,
 "fixed_in": "3.1.4",
 "remediation": "Update to 3.1.4 or later.",
 "fix_released": "2026-11-02T11:44:24+00:00",
 "published": "2026-11-03T14:48:33+00:00",
 "updated": "2026-11-03T13:23:29.752961+00:00",
 "also_published_as": null,
 "references": [
  "https://wpsec.com/vuln/WPSEC-2026-2284/",
  "https://plugins.svn.wordpress.org/review-schema/tags/3.1.4/",
  "https://wordpress.org/plugins/review-schema/"
 ],
 "attacksurface_url": "https://attacksurface.wpsec.com/plugin/review-schema",
 "source": "WPSec",
 "license": {
  "name": "CC BY 4.0",
  "url": "https://creativecommons.org/licenses/by/4.0/"
 },
 "usage": {
  "plugin": "Low",
  "affected_versions": "Low",
  "as_of": "2026-11-03"
 }
}