PT-2025-37118

CVE-2025-9034

·

Published

2025-08-21

·

Updated

2025-09-11

Description by

CVSS 3.1
6.1
Medium
MetricsAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions: Wp Edit Password Protected WordPress plugin versions prior to 1.3.5
Description: The Wp Edit Password Protected WordPress plugin does not validate a parameter before redirecting the user to its value, resulting in an Open Redirect issue.
Recommendations: Update the Wp Edit Password Protected WordPress plugin to version 1.3.5 or later.
Exploitability
Exploit
Fix
Researchers
Vendors
Affected products
Related identifiers
CVE-2025-9034
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com