buildwps vulnerabilities

CVEs per yearBy the year they were published

1. 20242
2. 20252
3. 20267

Newest CVEs

• CVE-2026-116520

  PPWP <= 1.9.26 - Unauthenticated Stored Cross-Site Scripting via '[ppwp]' Shortcode 'desc_below_form' Attribute via Placeholder Marker Collision

  buildwps · PPWP – Password Protect Pages

  High7.2
• CVE-2025-9878

  Password Protect WordPress Lite <= 1.9.21 - Authenticated (Contributor+) Stored Cross-Site Scripting

  buildwps · PPWP – Password Protect Pages

  Medium6.4
• CVE-2026-0551

  PPWP – Password Protect Pages <= 1.9.18 - Authenticated (Contributor+) PHP Object Injection via post_protection_roles

  buildwps · PPWP – Password Protect Pages

  High8.8
• CVE-2025-11729

  PPWP: Password Protect Pages, Posts & Full or Partial Content <= 1.9.15 - Improper Authorization To Authenticated (Contributor+) Master Password Exposure

  buildwps · PPWP – Password Protect Pages

  Medium4.3
• CVE-2025-10005

  Password Protect WordPress Lite <= 1.9.20 - Insecure Direct Object Reference to Authenticated (Contributor+) Password Protected Post Password Update

  buildwps · PPWP – Password Protect Pages

  Medium4.3
• CVE-2026-3639

  PPWP – Password Protect Pages <= 1.9.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes

  buildwps · PPWP – Password Protect Pages

  Medium6.4
• CVE-2026-3835

  Prevent Direct Access – Protect WordPress Files <= 2.8.8.8 - Unauthenticated Protected File Access

  buildwps · Prevent Direct Access – Protect WordPress Files

  Medium5.3
• CVE-2025-3923

  Prevent Direct Access – Protect WordPress Files <= 2.8.8 - Unauthenticated Sensitive Information Exposure

  buildwps · Prevent Direct Access – Protect WordPress Files

  Medium5.3
• CVE-2025-3861

  Prevent Direct Access 2.8.6 - 2.8.8.2 - Incorrect Authorization to Authenticated (Contributor+) Multiple Media Actions

  buildwps · Prevent Direct Access – Protect WordPress Files

  Medium5.4
• CVE-2024-11280

  PPWP – Password Protect Pages <= 1.9.5 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure

  buildwps · PPWP – Password Protect Pages

  Medium5.3