Skip to content
Sign in
5.3 Medium

CVE-2026-90952 The WP Edit Password Protected WordPress plugin before 2.0.7 does not enforce its site-wide access restriction on the…

Description

The WP Edit Password Protected WordPress plugin before 2.0.7 does not enforce its site-wide access restriction on the WordPress REST API, allowing unauthenticated users to read the content of published posts and pages that the site's access mode was configured to hide.

Affected products and versions

Product Affected versions Fixed in
Wp Edit Password Protected 2.0 2.0.0 → < 2.0.7 2.0.7

Other CVEs of Wp Edit Password Protected

The 3 CVEs of Wp Edit Password Protected →
CVE-2025-8945 The Wp Edit Password Protected WordPress plugin before 1.3.5 allows protecting page content, but this protection can… 5.3 Medium CVE-2025-9034 The Wp Edit Password Protected WordPress plugin before 1.3.5 does not validate a parameter before redirecting the… 6.1 Medium
Track this CVE