Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2025-8945 1 Wordpress-extensions 1 Wp Edit Password Protected 2026-11-11 5.3 Medium
The Wp Edit Password Protected WordPress plugin before 1.3.5 allows protecting page content, but this protection can be bypassed by using the REST API.
CVE-2026-90952 1 Wordpress-extensions 1 Wp Edit Password Protected 2026-10-04 5.3 Medium
The WP Edit Password Protected WordPress plugin before 2.0.7 does not enforce its site-wide access restriction on the WordPress REST API, allowing unauthenticated users to read the content of published posts and pages that the site's access mode was configured to hide.