Skip to content
OpenAdvisories
High · 7.1 CVE-2025-23435 EUVD-2025-3181GHSA-29pf-2r42-58qj

WordPress Password Protect Plugin for WordPress plugin <= 0.8.1.0 - CSRF to Stored XSS vulnerability

Published Jan 16, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: marcucci Product: Password Protect Plugin for WordPress Category: Web / CMS

Description

Cross-Site Request Forgery (CSRF) vulnerability in marcucci Password Protect Plugin for WordPress password-protect-plugin-for-wordpress allows Stored XSS.This issue affects Password Protect Plugin for WordPress: from n/a through <= 0.8.1.0.

Affected products

VendorProductAffectedFixed
marcucci Password Protect Plugin for WordPress ≤ 0.8.1.0 —

References