121 matches found
CVE-2025-23435: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in marcucci Password Protect Plugin for WordPress password-protect-plugin-for-wordpress allows Stored XSS.This issue affects Password Protect Plugin for WordPress: from n/a through = 0.8.1.0...
PT-2025-4878 · WordPress · Password Protect Plugin
Name of the Vulnerable Software and Affected Versions: Password Protect Plugin for WordPress versions 0.8.1.0 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended...
CVE-2024-11282: Exposure of Sensitive Information to an Unauthorized Actor
The Passster – Password Protect Pages and Content plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.2.10 via the WordPress core search feature. This makes it possible for unauthenticated attackers to extract sensitive data from posts that...
CVE-2024-11280 PPWP – Password Protect Pages <= 1.9.5 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
The PPWP – Password Protect Pages plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.9.5 via the WordPress core search feature. This makes it possible for unauthenticated attackers to extract sensitive data from posts that have been...
CVE-2024-11280 PPWP – Password Protect Pages <= 1.9.5 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
The PPWP – Password Protect Pages plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.9.5 via the WordPress core search feature. This makes it possible for unauthenticated attackers to extract sensitive data from posts that have been...
CVE-2024-11280
CVE-2024-11280 affects the PPWP – Password Protect Pages plugin for WordPress. The issue enables sensitive information exposure through the WordPress core search feature, allowing unauthenticated users to access restricted post data. Connected sources corroborate the vulnerability description and...
WordPress PPWP – Password Protect Pages plugin <= 1.9.5 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure vulnerability
Unauthenticated Content Restriction Bypass to Sensitive Information Exposure vulnerability discovered by Francesco Carlucci in WordPress Plugin PPWP versions = 1.9.5...
CVE-2024-11280: Exposure of Sensitive Information to an Unauthorized Actor
The PPWP – Password Protect Pages plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.9.5 via the WordPress core search feature. This makes it possible for unauthenticated attackers to extract sensitive data from posts that have been...
WordPress plugin PPWP – Password Protect Pages 信息泄露漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An information disclosure...
PT-2024-16881 · WordPress · Ppwp – Password Protect Pages
Name of the Vulnerable Software and Affected Versions: PPWP – Password Protect Pages plugin for WordPress versions up to, and including, 1.9.5 Description: The PPWP – Password Protect Pages plugin for WordPress is vulnerable to Sensitive Information Exposure via the WordPress core search feature...
CVE-2024-52402
Cross-Site Request Forgery CSRF vulnerability in gunghoinc Exclusive Content Password Protect exclusive-content-password-protect allows Upload a Web Shell to a Web Server.This issue affects Exclusive Content Password Protect: from n/a through = 1.1.0...
CVE-2024-52402
CVE-2024-52402 concerns a CSRF to Arbitrary File Upload vulnerability in WordPress plugin Exclusive Content Password Protect (versions
CVE-2024-52402: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in gunghoinc Exclusive Content Password Protect exclusive-content-password-protect allows Upload a Web Shell to a Web Server.This issue affects Exclusive Content Password Protect: from n/a through = 1.1.0...
PT-2024-35241
Name of the Vulnerable Software and Affected Versions Cliconomics Exclusive Content Password Protect versions 1.1.0 and earlier Description A Cross-Site Request Forgery CSRF issue affects the software, allowing an attacker to upload a web shell to a web server. This can be exploited by tricking a...
WordPress Exclusive Content Password Protect Plugin <= 1.1.0 is vulnerable to Cross Site Request Forgery (CSRF)
Software Exclusive Content Password Protect Type Plugin Vulnerable versions = 1.1.0 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-52402 Patch priority Low CVSS severity Low 9.6 Developer Claim ownership PSID b722ce5d7201 Credits...
CVE-2024-0437: Improper Access Control
The Password Protected – Ultimate Plugin to Password Protect Your WordPress Content with Ease plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.6.6 via the API. This makes it possible for authenticated attackers, with subscriber access or...
PT-2024-15561
Name of the Vulnerable Software and Affected Versions Password Protected – Ultimate Plugin to Password Protect Your WordPress Content with Ease versions up to, and including, 2.6.6 Description The issue allows authenticated attackers with subscriber access or higher to extract post titles and...
CVE-2024-0620
The PPWP – Password Protect Pages plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.8.9 via API. This makes it possible for unauthenticated attackers to obtain post titles, IDs, slugs as well as other information including for...
CVE-2024-0620
The PPWP – Password Protect Pages plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.8.9 via API. This makes it possible for unauthenticated attackers to obtain post titles, IDs, slugs as well as other information including for...