Security Advisory

CVE-2025-5920

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-07-04 09:52:44

Last updated 2025-07-08 17:38:34

Assigner WPScan

CVSS score not scored

State PUBLISHED

Description

The Sharable Password Protected Posts before version 1.1.1 allows access to password protected posts by providing a secret key in a GET parameter. However, the key is exposed by the REST API.

← Browse all CVEs View on cve.org ↗