CVE-2025-14069

Name of the Vulnerable Software and Affected Versions Schema & Structured Data for WP & AMP plugin for WordPress versions through 1.54

Description The Schema & Structured Data for WP & AMP plugin for WordPress is susceptible to Stored Cross-Site Scripting. The issue stems from inadequate input sanitization and output escaping in the saswp custom schema field profile field. This allows authenticated attackers with Contributor-level access or higher to inject malicious web scripts into pages. When a user accesses an affected page, the injected scripts will execute.

Recommendations Update the Schema & Structured Data for WP & AMP plugin for WordPress to a version later than 1.54.