Back to Database
Status published
Medium
CVE-2021-29450
WordPress Authenticated disclosure of password-protected posts and pages
Vulnerability Description
Wordpress is an open source CMS. One of the blocks in the WordPress editor can be exploited in a way that exposes password-protected posts and pages. This requires at least contributor privileges. This has been patched in WordPress 5.7.1, along with the older affected versions via minor releases. It's strongly recommended that you keep auto-updates enabled to receive the fix.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-29450
Credits & Attribution
No credits recorded in the NVD database.
References
More from WordPress
View All →CVE-2025-58674
WordPress <= 6.8.2 - (Author+) Cross Site Scripting (XSS) Vulnerability
Medium
5.9
CVE-2025-58246
WordPress <= 6.8.2 - (Contributor+) Sensitive Data Exposure Vulnerability
Medium
4.3
CVE-2025-54352
WordPress 3.5 through 6.8.2 allows remote attackers to guess titles...
Low
3.7
CVE-2024-31211
Remote Code Execution in `WP_HTML_Token`
Medium
5.5
CVE-2024-31210
PHP file upload bypass via Plugin installer
High
7.7
Affected Vendor
WordPress
View all reports →Affected Software
wordpress-develop
Vulnerable Versions:
>= 4.70,< 5.7.1
Timeline
Official Publish:
April 15th, 2021
Last Modified:
August 3rd, 2024
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N