CVE-2025-23435

Cross-Site Request Forgery CSRF vulnerability in marcucci Password Protect Plugin for WordPress password-protect-plugin-for-wordpress allows Stored XSS.This issue affects Password Protect Plugin for WordPress: from n/a through = 0.8.1.0...

CVE-2025-23435

creationtimestamp| type| source ---|---|--- 2025-01-16 20:16:30+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfv3w4zotv2p 2025-01-16 20:23:06+00:00| seen| https://infosec.exchange/users/cve/statuses/113839897676072055...

CVE-2025-23435

CVE-2025-23435 describes a CSRF-driven Stored XSS in the Password Protect Plugin for WordPress. Affected: Password Protect Plugin for WordPress versions

CVE-2025-23435 WordPress Password Protect Plugin for WordPress plugin <= 0.8.1.0 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in David Marcucci Password Protect Plugin for WordPress allows Stored XSS.This issue affects Password Protect Plugin for WordPress: from n/a through 0.8.1.0...

CVE-2025-23435 WordPress Password Protect Plugin for WordPress plugin <= 0.8.1.0 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in marcucci Password Protect Plugin for WordPress password-protect-plugin-for-wordpress allows Stored XSS.This issue affects Password Protect Plugin for WordPress: from n/a through = 0.8.1.0...