All products

password-protect-page

WordPress · Plugin
12 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
PPWP <= 1.9.26 - Unauthenticated Stored Cross-Site Scripting via '[ppwp]' Shortcode 'desc_below_form' Attribute via Placeholder Marker CollisionCVE-2026-116520 password-protect-page WordPress High Fix reported
PPWP – Password Protect Pages <= 1.9.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode AttributesCVE-2026-3639 password-protect-page WordPress Medium Fix reported
Password Protect WordPress Lite <= 1.9.21 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2025-9878 password-protect-page WordPress Medium Fix reported
PPWP – Password Protect Pages <= 1.9.18 - Authenticated (Contributor+) PHP Object Injection via post_protection_rolesCVE-2026-0551 password-protect-page WordPress High Fix reported
PPWP: Password Protect Pages, Posts & Full or Partial Content <= 1.9.15 - Improper Authorization To Authenticated (Contributor+) Master Password ExposureCVE-2025-11729 password-protect-page WordPress Medium Fix reported
Password Protect WordPress Lite <= 1.9.20 - Insecure Direct Object Reference to Authenticated (Contributor+) Password Protected Post Password UpdateCVE-2025-10005 password-protect-page WordPress Medium Fix reported
PPWP – Password Protect Pages <= 1.9.19 - Authenticated (Contributor+) Insecure Direct Object ReferenceCVE-2026-57634 password-protect-page WordPress Medium Fix reported
PPWP – Password Protect Pages <= 1.9.15 - Missing AuthorizationCVE-2026-32562 password-protect-page WordPress Medium Fix reported
PPWP – Password Protect Pages <= 1.9.10 - Authenticated (Subscriber+) Content Exposure via REST APICVE-2025-5998 password-protect-page WordPress Medium Fix reported
PPWP – Password Protect Pages <= 1.9.5 - Unauthenticated Content Restriction Bypass to Sensitive Information ExposureCVE-2024-11280 password-protect-page WordPress Medium Fix reported
PPWP – Password Protect Pages <= 1.8.9 - Protection Mechanism BypassCVE-2024-0620 password-protect-page WordPress Medium Fix reported
PPWP – WordPress Password Protect Page <= 1.8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeCVE-2022-4626 password-protect-page WordPress Medium Fix reported