5.3
Moyenne
CVE-2026-90952 The WP Edit Password Protected WordPress plugin before 2.0.7 does not enforce its site-wide access restriction on the…
Description
The WP Edit Password Protected WordPress plugin before 2.0.7 does not enforce its site-wide access restriction on the WordPress REST API, allowing unauthenticated users to read the content of published posts and pages that the site's access mode was configured to hide.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Wp Edit Password Protected 2.0 | 2.0.0 → < 2.0.7 | 2.0.7 |