PT-2025-37118
CVE-2025-9034
·
Published
2025-08-21
·
Updated
2025-09-11
Description by
CVSS 3.1
6.1
MediumMetricsAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions:
Wp Edit Password Protected WordPress plugin versions prior to 1.3.5
Description:
The Wp Edit Password Protected WordPress plugin does not validate a parameter before redirecting the user to its value, resulting in an Open Redirect issue.
Recommendations:
Update the Wp Edit Password Protected WordPress plugin to version 1.3.5 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾