← Back

Passwordprotectwp

passwordprotectwp

3 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Password Protect Wordpress
password_protect_wordpress
3 CVEs

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2025-5998
1Passwordprotectwp
1Password Protect Wordpress
Jun 17, 2026
Aug 14, 2025
N/A· v4
6.5 MEDIUM· v3
N/A· v2
The PPWP – Password Protect Pages WordPress plugin before version 1.9.11 allows to put the site content behind a password authorization, however users with subscriber or greater roles can view content via the REST API.
CVE-2024-0620
1Passwordprotectwp
1Password Protect Wordpress
Jun 17, 2026
Feb 29, 2024
N/A· v4
5.3 MEDIUM· v3
N/A· v2
The PPWP – Password Protect Pages plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.8.9 via API. This makes it possible for unauthenticated attackers to obtain p...Show more
The PPWP – Password Protect Pages plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.8.9 via API. This makes it possible for unauthenticated attackers to obtain post titles, IDs, slugs as well as other information including for password-protected posts.Show less
CVE-2022-4626
1Passwordprotectwp
1Password Protect Wordpress
Jun 17, 2026
Feb 6, 2023
N/A· v4
5.4 MEDIUM· v3
N/A· v2
The PPWP WordPress plugin before 1.8.6 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cr...Show more
The PPWP WordPress plugin before 1.8.6 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins.Show less