WordPress Wp Edit Password Protected plugin < 1.3.5 - Open Redirect vulnerability

Open Redirect vulnerability discovered by Bob Matyas in WordPress Plugin Wp Edit Password Protected – Create Member/User Only Page & Design Password Protected Form versions 1.3.5...

CVE-2025-9034

creationtimestamp| type| source ---|---|--- 2025-09-11 06:41:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyk5dizbii2f...

CVE-2025-9034 Wp Edit Password Protected < 1.3.5 - Open Redirect

The Wp Edit Password Protected WordPress plugin before 1.3.5 does not validate a parameter before redirecting the user to its value, leading to an Open Redirect issue...