2 matches found
CVE-2026-93293
The Password Protected plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the bundled Freemius SDK's purchase-completion handler in all versions up to, and including, 2.8.4 due to insufficient input sanitization and output escaping. Once the site's Freemius opt-in is complete t...
6.4CVSS0.00187EPSS
SaveExploits0References3
EUVD-2026-112604
The Password Protected plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the bundled Freemius SDK's purchase-completion handler in all versions up to, and including, 2.8.4 due to insufficient input sanitization and output escaping. Once the site's Freemius opt-in is complete t...
6.4CVSS6.1AI score0.00187EPSS
SaveExploits0References3
20