CVE-2026-89283

Name of the Vulnerable Software and Affected Versions WP Posts Password Batch Manager versions prior to 1.2

Description The plugin fails to perform capability or nonce checks on a bulk post-password action executed via an always-loaded admin handler. This allows unauthenticated attackers to reset or overwrite passwords for all published posts, which can lead to the disclosure of password-protected content or the locking of all posts using a password chosen by the attacker.

Recommendations Update WP Posts Password Batch Manager to version 1.2 or later.