Vendors / WP Folio Team Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 0 CVSS 7.0–8.9
Exploited now WP Folio Team records in CISA KEV No WP Folio Team vulnerabilities are listed in CISA KEV.
Priority LOW 23
Missing Authorization vulnerability in WP Folio Team PPWP password-protect-page allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PPWP: from n/a through <= 1.9.15.
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · No interaction · EPSS 0.00136 · Published 2026-03-25 · No fix listed CWE-862
Priority LOW 20
Contributor Insecure Direct Object References (IDOR) in PPWP <= 1.9.19 versions.
CVSS 3.1 MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00254 · Published 2026-06-26 · No fix listed CWE-639
Open these records in search → All records by CVSS severity
Critical0 High0 Medium2 Low0 No CVSS0