https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-03T21:12:12.704209+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2026-90952 fkie_cve-2026-90952 2026-10-03T21:12:12.706395+00:00

The WP Edit Password Protected WordPress plugin before 2.0.7 does not enforce its site-wide access restriction on the WordPress REST API, allowing unauthenticated users to read the content of published posts and pages that the site's access mode was configured to hide.

 https://vulnerability.circl.lu/vuln/ghsa-phjc-p22w-v899 GHSA-phjc-p22w-v899 2026-10-03T21:12:12.706488+00:00

The WP Edit Password Protected WordPress plugin before 2.0.7 does not enforce its site-wide access restriction on the WordPress REST API, allowing unauthenticated users to read the content of published posts and pages that the site's access mode was configured to hide.