Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

PPWP – Password Protect Pages — Vulnerabilities & Security Advisories 8

All 8 CVE vulnerabilities found in PPWP – Password Protect Pages, with AI-generated Chinese analysis, references, and POCs.

Vendor: buildwps

CVE ID Title CVSS Severity Published
CVE-2025-9878 Password Protect WordPress Lite <= 1.9.21 - Authenticated (Contributor+) Stored Cross-Site Scripting CWE-79 6.4 Medium 2026-08-25
CVE-2026-0551 PPWP – Password Protect Pages <= 1.9.18 - Authenticated (Contributor+) PHP Object Injection via post_protection_roles CWE-502 8.8 High 2026-08-22
CVE-2025-11729 PPWP: Password Protect Pages, Posts & Full or Partial Content <= 1.9.15 - Improper Authorization To Authenticated (Contributor+) Master Password Exposure CWE-285 4.3 Medium 2026-08-18
CVE-2025-10005 Password Protect WordPress Lite <= 1.9.20 - Insecure Direct Object Reference to Authenticated (Contributor+) Password Protected Post Password Update CWE-639 4.3 Medium 2026-08-16
CVE-2026-3639 PPWP – Password Protect Pages <= 1.9.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes CWE-79 6.4 Medium 2026-08-13
CVE-2025-5998 PPWP < 1.9.11 - Subscriber+ Access Bypass via REST API 6.5AI Medium AI 2025-08-14
CVE-2024-11280 PPWP – Password Protect Pages <= 1.9.5 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure CWE-200 5.3 Medium 2024-12-17
CVE-2024-0620 PPWP – Password Protect Pages <= 1.8.9 - Protection Mechanism Bypass CWE-200 5.3 Medium 2024-02-20

All 8 known CVE vulnerabilities affecting PPWP – Password Protect Pages with full Chinese analysis, references, and POCs where available.