Wp Edit Password Protected Vulnerabilities

The Wp Edit Password Protected – Create Password Protect Pages & Design Password Protected Form plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 1.3.4. This is due to insufficient validation on the redirect url supplied via the 'redirect_to parameter. This makes it possible for...

CVSS:

4.7

Affected:

up to 1.3.4

Fixed in:

1.3.5

Disclosed:

Aug 21, 2025

CVE-2025-9034 on NVD →

The Appsero analytics tool used in several plugins is vulnerable to authorization bypass due to a missing capability check on the uninstall_reason_submission function used for feedback submission in versions up to, and including, 1.2.1. This makes it possible for authenticated attackers, with subscriber-level permissio...

CVSS:

4.3

Affected:

up to 1.2.3

Fixed in:

1.2.4

Disclosed:

Dec 16, 2022

The Appsero analytics tool used in several plugins is vulnerable to Cross-Site Request Forgery due to a missing nonce check on the uninstall_reason_submission function used for feedback submission in versions up to, and including, 1.2.0. This makes it possible for unauthenticated attackers to invoke this function inten...

CVSS:

4.3

Affected:

up to 1.2.3

Fixed in:

1.2.4

Disclosed:

Dec 14, 2022

CVE-2022-47150 on NVD →