PLUGIN SECURITY
Is Schema And Structured Data For Wp safe?
Schema & Structured Data adds Google Rich Snippets markup according to Schema.org guidelines to structure your site for SEO.
What this plugin does
- Slug:
schema-and-structured-data-for-wp - Author: Magazine3
- 100000+ active installs
- 90/100 rating (252 reviews on wordpress.org)
- 8094200 all-time downloads
- On WordPress.org since 2018-08-06
amprich snippetsschemaseostructured data
Maintenance status
- Latest known version: 1.63
- Last updated: 2026-10-12 8:05am GMT
- Tested up to WordPress: 7.1.3
- Requires PHP: 5.6.20+
- Max supported PHP (analyzed): 8.4
Known vulnerabilities
17 known CVEs on file for Schema And Structured Data For Wp.
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2026-82127 | Schema & Structured Data for WP & AMP [schema-and-structured-data-for-wp] < 1.67 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Unknown | < 1.67 | 1.67 | 2026-09-30 | ⚠ update needed |
| CVE-2026-97291 | Schema & Structured Data for WP & AMP [schema-and-structured-data-for-wp] < 1.67 | Deserialization of Untrusted Data | High 8.8 | < 1.67 | 1.67 | 2026-09-30 | ⚠ update needed |
| CVE-2026-96570 | Schema & Structured Data for WP & AMP [schema-and-structured-data-for-wp] < 1.68 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | High 7.2 | < 1.68 | 1.68 | 2026-09-30 | ⚠ update needed |
| CVE-2026-82126 | Schema & Structured Data for WP & AMP [schema-and-structured-data-for-wp] >= 1.63 - < 1.66 | Improper Access Control | Unknown | 1.63–1.66 | 1.66 | 2026-09-14 | ⚠ update needed |
| CVE-2026-82125 | Schema & Structured Data for WP & AMP [schema-and-structured-data-for-wp] >= 1.46 - < 1.66 | Authorization Bypass Through User-Controlled Key | Unknown | 1.46–1.66 | 1.66 | 2026-09-14 | ⚠ update needed |
| CVE-2026-82124 | Schema & Structured Data for WP & AMP [schema-and-structured-data-for-wp] < 1.66 | Exposure of Sensitive Information to an Unauthorized Actor | Unknown | < 1.66 | 1.66 | 2026-09-14 | ⚠ update needed |
| CVE-2026-9067 | Schema & Structured Data for WP & AMP [schema-and-structured-data-for-wp] < 1.60 | Unrestricted Upload of File with Dangerous Type | Unknown | < 1.60 | 1.60 | 2026-06-10 | ✓ fixed in latest |
| CVE-2025-14069 | Schema & Structured Data for WP & AMP [schema-and-structured-data-for-wp] < 1.54.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.4 | < 1.54.1 | 1.54.1 | 2026-01-22 | ✓ fixed in latest |
+ 11 more known vulnerabilities
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2025-11502 | Schema & Structured Data for WP & AMP [schema-and-structured-data-for-wp] < 1.52 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.4 | < 1.52 | 1.52 | 2025-10-31 | ✓ fixed in latest |
| CVE-2024-49683 | Schema & Structured Data for WP & AMP [schema-and-structured-data-for-wp] < 1.36 | Missing Authorization | Medium 5.3 | < 1.36 | 1.36 | 2024-10-21 | ✓ fixed in latest |
| CVE-2024-5582 | Schema & Structured Data for WP & AMP [schema-and-structured-data-for-wp] < 1.34.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 5.4 | < 1.34.1 | 1.34.1 | 2024-07-16 | ✓ fixed in latest |
| CVE-2024-3491 | Schema & Structured Data for WP & AMP [schema-and-structured-data-for-wp] < 1.30 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.4 | < 1.30 | 1.30 | 2024-04-22 | ✓ fixed in latest |
| CVE-2024-1288 | Schema & Structured Data for WP & AMP [schema-and-structured-data-for-wp] < 1.27 | Improper Access Control | Medium 4.3 | < 1.27 | 1.27 | 2024-02-19 | ✓ fixed in latest |
| CVE-2024-1586 | Schema & Structured Data for WP & AMP [schema-and-structured-data-for-wp] < 1.27 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 5.4 | < 1.27 | 1.27 | 2024-02-19 | ✓ fixed in latest |
| CVE-2024-22146 | Schema & Structured Data for WP & AMP [schema-and-structured-data-for-wp] < 1.26 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.5 | < 1.26 | 1.26 | 2024-01-12 | ✓ fixed in latest |
| CVE-2023-51677 | Schema & Structured Data for WP & AMP [schema-and-structured-data-for-wp] < 1.24 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.5 | < 1.24 | 1.24 | 2023-12-27 | ✓ fixed in latest |
| — | Schema & Structured Data for WP & AMP [schema-and-structured-data-for-wp] < 1.50 | — | Medium 6.1 | < 1.50 | 1.50 | 0000-00-00 | ✓ fixed in latest |
| CVE-2024-22146 | Schema & Structured Data for WP & AMP < 1.26 - Contributor+ Stored Cross-Site Scripting | — | Unknown | < 1.26 | 1.26 | — | ✓ fixed in latest |
| CVE-2025-9512 | Schema & Structured Data for WP & AMP < 1.50 - Unauthenticated Stored-XSS | — | Unknown | < 1.50 | 1.50 | — | ✓ fixed in latest |
How to fix it
Keep Schema And Structured Data For Wp updated — 1.63 is the latest version on wordpress.org, and each CVE above lists the exact release that fixed it ("Fixed in").
This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.
Safer / more established alternatives
- AMP — 300000+ active installs — 76/100 (367) — max PHP 8.4
- Ad Inserter – Ad Manager & AdSense Ads — 300000+ active installs — 98/100 (2431) — max PHP 8.4
- Head, Footer and Post Injections — 200000+ active installs — 98/100 (735) — max PHP 8.4
- AMP for WP – Accelerated Mobile Pages — 70000+ active installs — 88/100 (1319) — max PHP 8.4
- Web Stories — 60000+ active installs — 84/100 (87)
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.