high7.5
CVE-2025-5920
The Sharable Password Protected Posts before version 1.1.1 allows access to password protected posts by providing a secret key in a GET parameter.
Impact
The Sharable Password Protected Posts before version 1.1.1 allows access to password protected posts by providing a secret key in a GET parameter. However, the key is exposed by the REST API.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fabiantodt | Private Post Share | before 1.1.1 |