Skip to content
OpenAdvisories

Vendor

teydeastudio

1 known vulnerabilities.

Products

WP Password Policy 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-15992

    WP Password Policy <= 3.7.1 - Authenticated (Subscriber+) Privilege Escalation

    The WP Password Policy plugin for WordPress is vulnerable to Privilege Escalation in all versions up to and including 3.7.1. This is due to missing authorization checks and nonce verification in the `get_user()` function of the `Module_Password_Hint` class, w…

    teydeastudio WP Password Policy Web / CMS