7.5
High
CVE-2025-5920 The Sharable Password Protected Posts before version 1.1.1 allows access to password protected posts by providing a…
Description
The Sharable Password Protected Posts before version 1.1.1 allows access to password protected posts by providing a secret key in a GET parameter. However, the key is exposed by the REST API.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Sharable Password Protected Posts 1.1 | earliest → < 1.1.1 | 1.1.1 |