Medium severity5.3NVD Advisory· Published Oct 2, 2026

CVE-2026-90952

Description

The WP Edit Password Protected WordPress plugin before 2.0.7 does not enforce its site-wide access restriction on the WordPress REST API, allowing unauthenticated users to read the content of published posts and pages that the site's access mode was configured to hide.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Wp Edit Password Protectedllm-fuzzy
Range: <2.0.7
Package: https://wordpress.org/plugins/wp-edit-password-protected

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/8cc260a9-f335-4d8c-a1e0-f942f0963bcf/nvd

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000