Skip to main content

Password Protect Wordpress

2 CVEs product

Monthly

CVE-2025-5998 Aug 14, 09:15 MEDIUM POC This Week

The PPWP - Password Protect Pages WordPress plugin before version 1.9.11 allows to put the site content behind a password authorization, however users with subscriber or greater roles can view. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP WordPress Information Disclosure Password Protect Wordpress Passwordprotectwp
NVD WPScan
CVSS 3.1
6.5
EPSS
0.0%
CVE-2024-0620 Feb 29, 01:43 MEDIUM PATCH This Month

The PPWP - Password Protect Pages plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.8.9 via API. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

WordPress Information Disclosure Password Protect Wordpress Wordpress Plugin Passwordprotectwp
NVD VulDB
CVSS 3.1
5.3
EPSS
0.4%
EPSS 0% CVSS 6.5
MEDIUM POC This Week

The PPWP - Password Protect Pages WordPress plugin before version 1.9.11 allows to put the site content behind a password authorization, however users with subscriber or greater roles can view. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP WordPress Information Disclosure +2
NVD WPScan
EPSS 0% CVSS 5.3
MEDIUM PATCH This Month

The PPWP - Password Protect Pages plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.8.9 via API. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

WordPress Information Disclosure Password Protect Wordpress +2
NVD VulDB

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy