Threats tagged 'ghsa-qmm8-q2c2-c4m3'

The Password Protected WordPress plugin before version 2.8.4 has a vulnerability that allows unauthenticated users to bypass the sitewide password protection via the REST API when a specific option is enabled. This issue re-introduces a previously fixed flaw that was patched in version 2.6.7 but regressed in 2.6.8. The vulnerability permits unauthorized reading of protected content and account identifiers.