WordPress PPWP plugin < 1.9.11 - Subscriber+ Access Bypass via REST API vulnerability

Subscriber+ Access Bypass via REST API vulnerability discovered by Pierre Rudloff in WordPress Plugin PPWP versions 1.9.11...

WordPress PPWP – WordPress Password Protect Page Plugin <= 1.8.9 is vulnerable to Bypass Vulnerability

Software PPWP – WordPress Password Protect Page Type Plugin Vulnerable versions = 1.8.9 Fixed in 1.9.0 OWASP Top 10 A5: Broken Access Control Classification Bypass Vulnerability CVE CVE-2024-0620 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 33bb0c05c31f Credits Francesc...