CVE-2024-0620

MEDIUM 5.3CVE-2024-0620 · Published 29/02/2024 · updated 17/06/2026

In short

CVE-2024-0620 is a MEDIUM (CVSS 5.3) vulnerability affecting password protect wordpress (passwordprotectwp).
Chance of exploitation in the next 30 days (EPSS): 0.48%, higher than 41.7% of all vulnerabilities.
Fix: update to 1.9.0 or later.

Package	Affected versions	Patched versions
password protect wordpress passwordprotectwp	`< 1.9.0`	`1.9.0`

Description

The PPWP – Password Protect Pages plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.8.9 via API. This makes it possible for unauthenticated attackers to obtain post titles, IDs, slugs as well as other information including for password-protected posts.

References

plugins.trac.wordpress.org/changeset · Patch
wordfence.com/threat-intel/vulnerabilities/id/41299927-2ed9-4cbe-b2b0-f306dc0e4a58 · Third Party Advisory

More vulnerabilities in password protect wordpress

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free