WP Folio Team Vulnerabilities and Affected Products
Vulnerabilities associated with PPWP.
Products
Clear product- PPWP2 vulnerabilities
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2026-57634MEDIUM | WordPress PPWP plugin <= 1.9.19 - Insecure Direct Object References (IDOR) vulnerabilityContributor Insecure Direct Object References (IDOR) in PPWP <= 1.9.19 versions. CWE-639Jun 26, 2026 | CVSS4.3v3.1 | EPSS0.18% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-32562MEDIUM | WordPress PPWP plugin <= 1.9.15 - Broken Access Control vulnerabilityMissing Authorization vulnerability in WP Folio Team PPWP password-protect-page allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PPWP: from n/a through <= 1.9.15. CWE-862Mar 25, 2026 | CVSS5.4v3.1 | EPSS0.131% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |