Veille CVE

Recherche « Unknown WP Edit Password Protected »

3 CVE

  1. CVE-2026-90952 5.3 Moyenne

    Unknown WP Edit Password Protected

    The WP Edit Password Protected WordPress plugin before 2.0.7 does not enforce its site-wide access restriction on the WordPress REST API, allowing unauthenticated users to read the content of published posts and pages that the site's access mode was configured to hide.

  2. CVE-2026-82126 2.7 Faible

    Unknown Schema & Structured Data for WP & AMP

    The Schema & Structured Data for WP & AMP WordPress plugin before 1.66 does not check that a user is allowed to edit the specific post they request schema generation for, allowing users with the contributor role and above to obtain the content of other users' draft, pending, private and password protected posts.

  3. CVE-2025-8945 5.3 Moyenne

    Unknown Wp Edit Password Protected

    The Wp Edit Password Protected WordPress plugin before 1.3.5 allows protecting page content, but this protection can be bypassed by using the REST API.