8.6
Élevée
CVE-2026-89283 The WP Posts Password Batch Manager WordPress plugin through 1.1 does not perform any capability or nonce check on a…
Description
The WP Posts Password Batch Manager WordPress plugin through 1.1 does not perform any capability or nonce check on a bulk post-password action that runs on an always-loaded admin handler, allowing unauthenticated attackers to reset or overwrite the password of every published post, disclosing password-protected content or locking all posts behind an attacker-chosen password.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| WP Posts Password Batch Manager 1.1 | premières → 1.1 | Pas de correctif indiqué |