WP Folio Team vulnerabilities

🔔 Create alert RSS

Published CVEs affecting WP Folio Team products: 2 record(s), with severity, exploitation and fixes.

Exploited only (KEV) →

CVE-2026-57634 Medium · 4.3 CWE-639 Jun 26, 2026

WordPress PPWP plugin <= 1.9.19 - Insecure Direct Object References (IDOR) vulnerability

Contributor Insecure Direct Object References (IDOR) in PPWP <= 1.9.19 versions.

CVE-2026-32562 Medium · 5.4 CWE-862 Mar 25, 2026

WordPress PPWP plugin <= 1.9.15 - Broken Access Control vulnerability

Missing Authorization vulnerability in WP Folio Team PPWP password-protect-page allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PPWP: from n/a through <= 1.9.15.