CVE-2025-11729

Name of the Vulnerable Software and Affected Versions PPWP: Password Protect Pages, Posts & Full or Partial Content versions prior to 1.9.16

Description An improper capability check in the can access() function allows authenticated attackers with Contributor-level access or higher to retrieve a master-password. This flaw enables unauthorized access to any password-protected content within the system.

Recommendations Update the plugin to a version newer than 1.9.15.