CVE-2025-14069

🗓️ 23 Jan 2026 05:29:51Reported by WordfenceType

Authenticated contributors can exploit stored XSS via custom schema field in Schema Structured Data for WordPress and AMP up to version 1.54.

Reporter	Title	Published	Views	Family All 11
ATTACKERKB	CVE-2025-14069	23 Jan 202605:29	–	attackerkb
Circl	CVE-2025-14069	23 Jan 202607:22	–	circl
CNNVD	WordPress Plugin: Schema & Structured Data for WP & AMP – Cross-Browser Script Vulnerabilities	23 Jan 202600:00	–	cnnvd
Cvelist	CVE-2025-14069 Schema & Structured Data for WP & AMP <= 1.54 - Authenticated (Contributor+) Stored Cross-Site Scripting via User Custom Schema	23 Jan 202605:29	–	cvelist
EUVD	EUVD-2026-4448	23 Jan 202605:29	–	euvd
NVD	CVE-2025-14069	23 Jan 202606:15	–	nvd
Patchstack	WordPress Schema & Structured Data for WP & AMP plugin <= 1.54 - Authenticated (Contributor+) Stored Cross-Site Scripting via User Custom Schema vulnerability	23 Jan 202607:44	–	patchstack
Positive Technologies	PT-2026-4323	23 Jan 202600:00	–	ptsecurity
RedhatCVE	CVE-2025-14069	24 Jan 202609:15	–	redhatcve
Vulnrichment	CVE-2025-14069 Schema & Structured Data for WP & AMP <= 1.54 - Authenticated (Contributor+) Stored Cross-Site Scripting via User Custom Schema	23 Jan 202605:29	–	vulnrichment

Vulners

Node

magazine3 schema_&_structured_data_for_wp_&_ampRange≤1.54wordpress

[
  {
    "vendor": "magazine3",
    "product": "Schema & Structured Data for WP & AMP",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "1.54",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
plugins	www.plugins.trac.wordpress.org/browser/schema-and-structured-data-for-wp/tags/1.53/admin_section/common-function.php
plugins	www.plugins.trac.wordpress.org/browser/schema-and-structured-data-for-wp/tags/1.53/output/function.php
plugins	www.plugins.trac.wordpress.org/changeset/3441582/schema-and-structured-data-for-wp/trunk
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/651a7036-d421-41b7-91db-102e60d8274e
plugins	www.plugins.trac.wordpress.org/browser/schema-and-structured-data-for-wp/tags/1.53/admin_section/structure-admin.php

15 Apr 2026 00:35Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.16.4

EPSS0.00017

SSVC

CWE-79