SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2025-8945

MEDIUM · CVSS 5.3 EPSS 0.21%

Source: NVD + CISA KEV + EPSS · Published 2026-09-02 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

The Wp Edit Password Protected WordPress plugin prior to version 1.3.5 is vulnerable as it allows unauthorized access to protected page content through the REST API, effectively bypassing the intended security measures. This could lead to exposure of sensitive information for sites relying on this plugin for content protection. WordPress site administrators using this plugin should prioritize updating to the latest version to mitigate potential risks.

CVE
CVE-2025-8945
Severity
MEDIUM
CVSS
5.3
EPSS
0.21%
WordPress

Original NVD Description

The Wp Edit Password Protected WordPress plugin before 1.3.5 allows protecting page content, but this protection can be bypassed by using the REST API.