CVE-2026-93293 | Password Protected Plugin up to 2.8.4 on WordPress Purchase Completion purchased_plan cross site scripting

October 29, 2026 Yanac

A vulnerability classified as problematic was found in Password Protected Plugin up to 2.8.4 on WordPress. This vulnerability affects unknown code of the component Purchase Completion Handler. Such manipulation of the argument purchased_plan leads to cross site scripting.

This vulnerability is listed as CVE-2026-93293. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More