Unknown Wp Edit Password Protected vulnerabilities

3 CVEs affecting Unknown Wp Edit Password Protected, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-90952, published 2026-10-02.

More from Unknown.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-90952, published 2026-10-02. Medium severity, CVSS 5.3. EPSS: 0.2% chance of exploitation in the next 30 days. The WP Edit Password Protected WordPress plugin before 2.0.7 does not enforce its site-wide access restriction on the WordPress REST API, allowing unauthenticated users to read the content of…
• CVE-2025-9034, published 2025-09-11. Medium severity, CVSS 6.1. EPSS: 0.2% chance of exploitation in the next 30 days. The Wp Edit Password Protected WordPress plugin before 1.3.5 does not validate a parameter before redirecting the user to its value, leading to an Open Redirect issue
• CVE-2025-8945, published 2026-09-02. Medium severity, CVSS 5.3. EPSS: 0.2% chance of exploitation in the next 30 days. The Wp Edit Password Protected WordPress plugin before 1.3.5 allows protecting page content, but this protection can be bypassed by using the REST API.