Advisories · Technology
buildwps PPWP – Password Protect Pages.
Every CVE that names buildwps PPWP – Password Protect Pages among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.2 High
PPWP <= 1.9.26 - Unauthenticated Stored Cross-Site Scripting via '[ppwp]' Shortcode 'desc_below_form' Attribute via Placeholder Marker Collision
- buildwps PPWP – Password Protect Pages
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Password Protect WordPress Lite <= 1.9.21 - Authenticated (Contributor+) Stored Cross-Site Scripting
- buildwps PPWP – Password Protect Pages
- Cross-site scripting (XSS)
- CVSS 8.8 High
PPWP – Password Protect Pages <= 1.9.18 - Authenticated (Contributor+) PHP Object Injection via post_protection_roles
- buildwps PPWP – Password Protect Pages
- Insecure deserialization
- CVSS 4.3 Medium
PPWP: Password Protect Pages, Posts & Full or Partial Content <= 1.9.15 - Improper Authorization To Authenticated (Contributor+) Master Password Exposure
- buildwps PPWP – Password Protect Pages
- Broken access control
- CVSS 4.3 Medium
Password Protect WordPress Lite <= 1.9.20 - Insecure Direct Object Reference to Authenticated (Contributor+) Password Protected Post Password Update
- buildwps PPWP – Password Protect Pages
- Broken access control
- CVSS 6.4 Medium
PPWP – Password Protect Pages <= 1.9.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
- buildwps PPWP – Password Protect Pages
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
PPWP – Password Protect Pages <= 1.9.5 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
- buildwps PPWP – Password Protect Pages
- Information disclosure
- CVSS 5.3 Medium
PPWP – Password Protect Pages <= 1.8.9 - Protection Mechanism Bypass
- buildwps PPWP – Password Protect Pages
- Information disclosure