The vulnerability resides in the Schema & Structured Data for WP & AMP WordPress plugin before version 1.60, where frontend AJAX upload handlers omit user capability checks and fail to validate the content type of files being uploaded. Based on the description, it is inferred that this enables any visitor to submit and store any file type that WordPress's media library accepts through endpoints intended to allow only images or videos. An attacker could use this to host malware or embed malicious content, potentially leading to data disclosure, integrity compromise, or remote code execution.

This flaw affects the Schema & Structured Data for WP & AMP plugin on all WordPress installations running any version prior to 1.60.

The CVE carries a CVSS score of 9.1, reflecting a critical severity, while its EPSS score remains unavailable and it is not listed in the CISA KEV catalog. The attack vector is inferred to be through publicly exposed AJAX endpoints on the website’s frontend, as the upload process omits user capability checks and MIME type validation. Because any unauthenticated visitor can submit files that WordPress accepts, the vulnerability can be trivially exploited by an attacker with no special prerequisites.