6.1
Medium
CVE-2025-9034 The Wp Edit Password Protected WordPress plugin before 1.3.5 does not validate a parameter before redirecting the…
Description
The Wp Edit Password Protected WordPress plugin before 1.3.5 does not validate a parameter before redirecting the user to its value, leading to an Open Redirect issue
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Wp Edit Password Protected 1.3 | earliest → < 1.3.5 | 1.3.5 |