CVE-2026-89283

The WP Posts Password Batch Manager WordPress plugin (versions through 1.1 ) contains a vulnerability where it fails to perform capability or nonce checks on a bulk post-password action. This action runs on an always-loaded admin handler, allowing unauthenticated attackers to reset or overwrite t...