SmartCrawl WordPress SEO checker < 3.8.3 - Unauthenticated Password Protected Post Disclosure

Description The plugin does not prevent unauthorised users from accessing password-protected posts’ content.

PoC

As unauthenticated, view the source (via the web browser) of any password protected post and find The content of the post will be disclosed in the meta and script tags after this, example: {…,“description”:“pwd protected Secret”,“name”:“Protected: PWD Protected Post”}]}