Skip to content
Threat Feed
Subscribe

Vendor

Password Protect WordPress

1 brief RSS
high advisory

Password Protect WordPress: Stored Cross-Site Scripting (CVE-2026-116520)

The PPWP Password Protect Pages plugin for WordPress is vulnerable to unauthenticated Stored Cross-Site Scripting via improper input sanitization in shortcode attributes, allowing script injection into pages.

PPWP – Password Protect Pages xss web-vulnerability wordpress cve-2026-116520
1t 1c