CVE-2024-0437

The Password Protected – Ultimate Plugin to Password Protect Your WordPress Content with Ease plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.6.6 via the API. This makes it possible for authenticated attackers, with subscriber access or...

CVE-2024-0437 Password Protected – Ultimate Plugin to Password Protect Your WordPress Content with Ease <= 2.6.6 - Missing Authorization to Sensitive Information Exposure

The Password Protected – Ultimate Plugin to Password Protect Your WordPress Content with Ease plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.6.6 via the API. This makes it possible for authenticated attackers, with subscriber access or...

CVE-2024-0437

CVE-2024-0437 affects Password Protected – Password Protect your WordPress Content with Ease (WordPress plugin). All versions up to 2.6.6 are vulnerable to Sensitive Information Exposure via the API, allowing authenticated attackers with subscriber access or higher to extract post titles and cont...

WordPress Password Protected Plugin <= 2.6.6 is vulnerable to Broken Access Control

Software Password Protected Type Plugin Vulnerable versions = 2.6.6 Fixed in 2.6.7 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-0437 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 9ba2b44f0023 Credits Francesco Carlucci Required...