Description
The PPWP – Password Protect Pages WordPress plugin before version 1.9.11 allows to put the site content behind a password authorization, however users with subscriber or greater roles can view content via the REST API.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | PPWP – Password Protect Pages | < 1.9.11 | 1.9.11 |
References
- https://wpscan.com/vulnerability/17bad181-6cea-445e-b91c-22415d90743e/ exploit vdb-entry technical-description