Passwordprotectwp

Password Protect Wordpress

3 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.5

CVE-2025-5998

Exploit
  • EPSS 0.04%
  • Veröffentlicht 14.08.2025 08:48:54
  • Zuletzt bearbeitet 18.08.2025 20:17:50

The PPWP – Password Protect Pages WordPress plugin before version 1.9.11 allows to put the site content behind a password authorization, however users with subscriber or greater roles can view content via the REST API.

5.3

CVE-2024-0620

  • EPSS 0.43%
  • Veröffentlicht 29.02.2024 01:43:23
  • Zuletzt bearbeitet 27.01.2025 17:28:48

The PPWP – Password Protect Pages plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.8.9 via API. This makes it possible for unauthenticated attackers to obtain post titles, IDs, slugs as well...

5.4

CVE-2022-4626

Exploit
  • EPSS 0.3%
  • Veröffentlicht 06.02.2023 20:15:11
  • Zuletzt bearbeitet 25.03.2025 18:15:29

The PPWP WordPress plugin before 1.8.6 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks whi...