The SmartCrawl WordPress plugin prior to 3.8.3 does not prevent unauthorised users from accessing password-protected posts' content.
wpmudev smartcrawl