Vendor
Saad Iqbal
105 known vulnerabilities.
Products
Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App 13
myCred 11
Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution 8
Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred 8
WP EasyPay 6
New User Approve 6
License Manager for WooCommerce 5
WP Easy Pay – Payment and Donation Form Builder for Square 4
Post SMTP 4
Password Protected — Lock Entire Site, Pages, Posts, Categories, and Partial Content 4
User Management 3
AppExperts 3
APIExperts Square for WooCommerce 3
Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder 3
Quick Contact Form 3
Email Templates Customizer and Designer for WordPress and WooCommerce 2
Post Snippets 2
WPExperts Square For GiveWP 2
All In One Login 2
Post Snippets – Custom WordPress Code Snippets Customizer 2
Bookify 1
WPFormify – Stripe Payments with Form and Checkout 1
Advanced File Manager 1
User Avatar - Reloaded 1
Wholesale for WooCommerce 1
Advanced File Manager — Ultimate WordPress File Manager and Document Library Plugin 1
Gutena Kit – Gutenberg Blocks and Templates 1
Post SMTP – Complete Email Delivery and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App 1
myCred Elementor 1
WC Shop Sync – Square Payment Gateway and Product Synchronization for WooCommerce 1
Password Protected – Protect Your Site Content With a Password 1
1 result · Clear filters · Feed
-
Low 3.7
Password Protected <= 2.7.11 - Unauthenticated Authorization Bypass via IP Address Spoofing
The Password Protected plugin for WordPress is vulnerable to authorization bypass via IP address spoofing in all versions up to, and including, 2.7.11. This is due to the plugin trusting client-controlled HTTP headers (such as X-Forwarded-For, HTTP_CLIENT_IP,…