medium5.3
CVE-2026-90952
The WP Edit Password Protected WordPress plugin before 2.0.7 does not enforce its site-wide access restriction on the WordPress REST API, allowing unauthentica…
Impact
The WP Edit Password Protected WordPress plugin before 2.0.7 does not enforce its site-wide access restriction on the WordPress REST API, allowing unauthenticated users to read the content of published posts and pages that the site's access mode was configured to hide.
Affected products
| Product | Affected versions |
|---|---|
| WP Edit Password Protected WordPress Plugin | before 2.0.7 |
Versions were read from the advisory text. No structured product data has been published for this record yet.