Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2025-5998

PPWP < 1.9.11 - Subscriber+ Access Bypass via REST API

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
WPScan

Description

The PPWP – Password Protect Pages WordPress plugin before version 1.9.11 allows to put the site content behind a password authorization, however users with subscriber or greater roles can view content via the REST API.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown PPWP – Password Protect Pages

Default version status: unaffected

  • 0 to < 1.9.11affected

References