Skip to contentUnknown Ppwp – Password Protect Pages vulnerabilities
- buildwps ppwp – password protect pagesPPWP <= 1.9.26 - Unauthenticated Stored Cross-Site Scripting via '[ppwp]' Shortcode 'desc_below_form' Attribute via Placeholder Marker CollisionCVE-2026-1165207.2 High
- buildwps ppwp – password protect pagesPassword Protect WordPress Lite <= 1.9.21 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2025-98786.4 Medium
- buildwps ppwp – password protect pagesPPWP – Password Protect Pages <= 1.9.18 - Authenticated (Contributor+) PHP Object Injection via post_protection_rolesCVE-2026-05518.8 High
- buildwps ppwp – password protect pagesPPWP: Password Protect Pages, Posts & Full or Partial Content <= 1.9.15 - Improper Authorization To Authenticated (Contributor+) Master Password ExposureCVE-2025-117294.3 Medium
- buildwps ppwp – password protect pagesPassword Protect WordPress Lite <= 1.9.20 - Insecure Direct Object Reference to Authenticated (Contributor+) Password Protected Post Password UpdateCVE-2025-100054.3 Medium
- buildwps ppwp – password protect pagesPPWP – Password Protect Pages <= 1.9.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode AttributesCVE-2026-36396.4 Medium
- unknown ppwp – password protect pages, passwordprotectwp password protect wordpress +1 morePPWP < 1.9.11 - Subscriber+ Access Bypass via REST APICVE-2025-59986.5 Medium
- buildwps ppwp – password protect pagesPPWP – Password Protect Pages <= 1.9.5 - Unauthenticated Content Restriction Bypass to Sensitive Information ExposureCVE-2024-112805.3 Medium
- buildwps ppwp – password protect pages, bwps ppwp, passwordprotectwp password protect wordpress +2 morePPWP – Password Protect Pages <= 1.8.9 - Protection Mechanism BypassCVE-2024-06205.3 Medium