CVE-2025-8945: Unknown Wp Edit Password Protected

Medium severity, CVSS 5.3. EPSS: 0.2% chance of exploitation in the next 30 days.

The Wp Edit Password Protected WordPress plugin before 1.3.5 allows protecting page content, but this protection can be bypassed by using the REST API.

Affected products

• Unknown Wp Edit Password Protected: before 1.3.5 (fixed in 1.3.5)

Published 2026-09-02. Last modified 2026-09-03.