What is GHSA-9ppj-ppgq-52c9?

GHSA-9ppj-ppgq-52c9 is a security advisory published by GitHub Security Advisories with Medium severity. The PPWP: Password Protect Pages, Posts \u0026 Full or Partial Content plugin for WordPress is...

Which CVE IDs does GHSA-9ppj-ppgq-52c9 cover?

GHSA-9ppj-ppgq-52c9 covers the following CVE IDs: CVE-2025-11729. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-9ppj-ppgq-52c9?

GHSA-9ppj-ppgq-52c9 has a CVSS v3 base score of 4.3, published by GitHub Security Advisories.

GHSA-9ppj-ppgq-52c9MediumCVSS 4.3

The PPWP: Password Protect Pages, Posts & Full or Partial Content plugin for WordPress is...

Vendor

GitHub Security Advisories

Published

August 19, 2026

Last Modified

August 19, 2026

🔗 CVE IDs covered (1)

CVE-2025-11729 →

📋 Description

The PPWP: Password Protect Pages, Posts & Full or Partial Content plugin for WordPress is vulnerable to unauthorized access of data due to a improper capability check on the can_access function in all versions up to, and including, 1.9.15. This makes it possible for authenticated attackers, with Contributor-level access and above, to retrieve a master-password and access any password-protected content.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2025-11729
https://plugins.trac.wordpress.org/changeset/3486400
https://www.wordfence.com/threat-intel/vulnerabilities/id/d1e041f0-3019-4d1f-b1a3-b40275c0966a?source=cve
https://github.com/advisories/GHSA-9ppj-ppgq-52c9