Bbuildwps

Products

Exploited and recent CVEs

• CVE-2026-116520 High 7.2 PPWP <= 1.9.26 - Unauthenticated Stored Cross-Site Scripting via '[ppwp]' Shortcode 'desc_below_form' Attribute via Placeholder Marker Collision 0.4%
• CVE-2025-9878 Medium 6.4 Password Protect WordPress Lite <= 1.9.21 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
• CVE-2026-0551 High 8.8 PPWP – Password Protect Pages <= 1.9.18 - Authenticated (Contributor+) PHP Object Injection via post_protection_roles 0.7%
• CVE-2025-11729 Medium 4.3 PPWP: Password Protect Pages, Posts & Full or Partial Content <= 1.9.15 - Improper Authorization To Authenticated (Contributor+) Master Password Exposure 0.3%
• CVE-2025-10005 Medium 4.3 Password Protect WordPress Lite <= 1.9.20 - Insecure Direct Object Reference to Authenticated (Contributor+) Password Protected Post Password Update 0.3%
• CVE-2026-3639 Medium 6.4 PPWP – Password Protect Pages <= 1.9.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes 0.3%
• CVE-2026-3835 Medium 5.3 Prevent Direct Access – Protect WordPress Files <= 2.8.8.8 - Unauthenticated Protected File Access 0.5%
• CVE-2025-3923 Medium 5.3 Prevent Direct Access – Protect WordPress Files <= 2.8.8 - Unauthenticated Sensitive Information Exposure 0.4%
• CVE-2025-3861 Medium 5.4 Prevent Direct Access 2.8.6 - 2.8.8.2 - Incorrect Authorization to Authenticated (Contributor+) Multiple Media Actions 0.3%
• CVE-2024-11280 Medium 5.3 PPWP – Password Protect Pages <= 1.9.5 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure 0.4%
• CVE-2024-0620 Medium 5.3 PPWP – Password Protect Pages <= 1.8.9 - Protection Mechanism Bypass 0.5%