Skip to content
Unknown Ppwp vulnerabilities
-
buildwps ppwp – password protect pages
PPWP <= 1.9.26 - Unauthenticated Stored Cross-Site Scripting via '[ppwp]' Shortcode 'desc_below_form' Attribute via Placeholder Marker Collision
CVE-2026-116520
7.2 High
-
buildwps ppwp – password protect pages
Password Protect WordPress Lite <= 1.9.21 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-9878
6.4 Medium
-
buildwps ppwp – password protect pages
PPWP – Password Protect Pages <= 1.9.18 - Authenticated (Contributor+) PHP Object Injection via post_protection_roles
CVE-2026-0551
8.8 High
-
buildwps ppwp – password protect pages
PPWP: Password Protect Pages, Posts & Full or Partial Content <= 1.9.15 - Improper Authorization To Authenticated (Contributor+) Master Password Exposure
CVE-2025-11729
4.3 Medium
-
buildwps ppwp – password protect pages
Password Protect WordPress Lite <= 1.9.20 - Insecure Direct Object Reference to Authenticated (Contributor+) Password Protected Post Password Update
CVE-2025-10005
4.3 Medium
-
buildwps ppwp – password protect pages
PPWP – Password Protect Pages <= 1.9.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
CVE-2026-3639
6.4 Medium
-
unknown ppwp – password protect pages, passwordprotectwp password protect wordpress +1 more
PPWP < 1.9.11 - Subscriber+ Access Bypass via REST API
CVE-2025-5998
6.5 Medium
-
buildwps ppwp – password protect pages
PPWP – Password Protect Pages <= 1.9.5 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
CVE-2024-11280
5.3 Medium
-
buildwps ppwp – password protect pages, bwps ppwp, passwordprotectwp password protect wordpress +2 more
PPWP – Password Protect Pages <= 1.8.9 - Protection Mechanism Bypass
CVE-2024-0620
5.3 Medium
-
unknown ppwp, passwordprotectwp password protect wordpress +1 more
PPWP – WordPress Password Protect Page < 1.8.6 - Contributor+ Stored XSS in Shortcode
CVE-2022-4626
5.4 Medium