WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
password-protect-page
Published
2026-03-23
Title
PPWP – Password Protect Pages < 1.9.16 - Missing Authorization
Slug
password-protect-page
Published
2026-06-26
Title
PPWP – Password Protect Pages < 1.9.20 - Authenticated (Contributor+) Insecure Direct Object Reference
Slug
password-protect-page
Published
2026-08-12
Title
PPWP – Password Protect Pages < 1.9.22 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Slug
password-protect-page
Published
2026-08-15
Title
Password Protect WordPress Lite < 1.9.21 - Insecure Direct Object Reference to Authenticated (Contributor+) Password Protected Post Password Update
Slug
password-protect-page
Published
2026-08-18
Title
PPWP – Password Protect Pages < 1.9.16 - Contributor+ Master Password Disclosure via can_access
Slug
password-protect-page
Published
2026-08-24
Title
Password Protect WordPress Lite < 1.9.22 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
password-protect-page
Published
2026-08-22
Title
PPWP – Password Protect Pages < 1.9.19 - Authenticated (Contributor+) PHP Object Injection via post_protection_roles
Slug
password-protect-page
Published
2026-10-30
Title
PPWP < 1.9.27 - Unauthenticated Stored Cross-Site Scripting via '[ppwp]' Shortcode 'desc_below_form' Attribute via Placeholder Marker Collision
Slug
password-protect-plugin-for-wordpress
Published
2025-01-16
Title
Password Protect Plugin for WordPress <= 0.8.1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
password-protected
Published
2014-08-01
Title
Password Protected 1.4 - Login Process redirect_to Parameter Arbitrary Site Redirect
Slug
password-protected
Published
2023-06-13
Title
Password Protected < 2.6.3 - Admin+ Stored XSS
Slug
password-protected
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
password-protected
Published
2024-02-19
Title
Password Protected < 2.6.7 - Admin+ Stored XSS
Slug
password-protected
Published
2024-05-14
Title
Password Protected < 2.6.7 - Missing Authorization to Sensitive Information Exposure
Slug
password-protected
Published
2025-04-16
Title
Password Protected – Password Protect your WordPress Site, Pages, & WooCommerce Products < 2.7.8 - Unauthenticated Sensitive Information Exposure
Slug
password-protected
Published
2025-10-24
Title
Password Protected < 2.7.12 - Unauthenticated Authorization Bypass via IP Address Spoofing
Slug
password-protected
Published
2026-08-03
Title
Password Protected < 2.8.4 - Unauthenticated Sensitive Information Exposure via REST API
Slug
password-protected
Published
2026-10-28
Title
Password Protected < 2.8.5 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Freemius purchase_completed Handler
Slug
password-protected-woo-store
Published
2024-03-04
Title
Password Protected Store for WooCommerce < 2.3 - Unauthenticated Arbitrary Post Tile & Content Access
Slug
password-requirements
Published
2026-07-27
Title
WP Password Policy < 3.7.2 - Subscriber+ Privilege Escalation
Slug
passwordless-login
Published
2014-11-13
Title
Passwordless Login Plugin - Multiple Input XSS
Slug
passwordless-login
Published
2024-03-18
Title
Passwordless Login < 1.1.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
passwordless-wp
Published
2025-01-16
Title
Passwordless WP – Login with your glance or fingerprint <= 1.1.6 - Reflected Cross-Site Scripting
Slug
passwords-manager
Published
2025-01-15
Title
Passwords Manager < 1.5.1 - Missing Authorization to Authenticated (Subscriber+) Add Password + Update Encryption Key
Slug
passwords-manager
Published
2025-01-15
Title
Passwords Manager < 1.5.1 - Authenticated (Subscriber+) SQL Injection