6.5
Medium
CVE-2025-5998 The PPWP – Password Protect Pages WordPress plugin before version 1.9.11 allows to put the site content behind a…
Description
The PPWP – Password Protect Pages WordPress plugin before version 1.9.11 allows to put the site content behind a password authorization, however users with subscriber or greater roles can view content via the REST API.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| PPWP – Password Protect Pages 1.9 | earliest → < 1.9.11 | 1.9.11 |