CVE-2025-5998 — PPWP < 1.9.11 - Subscriber+ Access Bypass via REST API
The PPWP – Password Protect Pages WordPress plugin before version 1.9.11 allows to put the site content behind a password authorization, however users with subscriber or greater…
Published: 2025-08-14 · CVSS: 6.5 · CVSS 3.1
The PPWP – Password Protect Pages WordPress plugin before version 1.9.11 allows to put the site content behind a password authorization, however users with subscriber or greater roles can view content via the REST API.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7