CVE-2026-90952

Name of the Vulnerable Software and Affected Versions WP Edit Password Protected WordPress plugin versions prior to 2.0.7

Description The plugin fails to enforce site-wide access restrictions on the WordPress REST API. This allows unauthenticated users to read the content of published posts and pages that were intended to be hidden by the site's access mode configuration.

Recommendations Update the plugin to version 2.0.7 or later.