Passster (Unknown) - vulnerabilities (CVEs)
10 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2026-09-02. Vendor: Unknown.
CVEs of Passster
- CVE-2025-15489 - CVSS 5.3 (medium), 2026-09-02: The Passster WordPress plugin before 4.2.24 does not handle input properly in an AJAX action, allowing unauthenticated users to retrieve the value of password…
- CVE-2025-15490 - CVSS 5.3 (medium), 2026-09-02: The Passster WordPress plugin before 4.2.26 has a flaw in its global protection checks, allowing unauthenticated users to bypass the protection offered via…
- CVE-2026-17559 - CVSS 5.3 (medium), 2026-08-21: The Passster WordPress plugin before 4.3.9 does not correctly match its own public endpoint paths when deciding which REST API requests may bypass global…
- CVE-2025-15674 - CVSS 2.7 (low), 2026-08-06: The Passster WordPress plugin before 4.3.7 does not restrict low-privilege users holding the edit_posts capability from reading globally password-protected…
- CVE-2026-16604 - CVSS 7.5 (high), 2026-08-05: The Passster WordPress plugin before 4.3.6 outputs password-protected block content in the public page response before verifying the password, allowing…
- CVE-2026-16603 - CVSS 7.5 (high), 2026-08-05: The Passster WordPress plugin before 4.3.6 does not enforce its category-based content protection on the WordPress REST API, allowing unauthenticated users to…
- CVE-2026-16602 - CVSS 7.5 (high), 2026-08-05: The Passster WordPress plugin before 4.3.6 does not perform a post-status check before returning post content from an unauthenticated REST endpoint, allowing…
- CVE-2021-24881 - CVSS 7.5 (high), 2023-01-23: The Passster WordPress plugin before 3.5.5.9 does not properly check for password, as well as that the post to be viewed is public, allowing unauthenticated…
- CVE-2021-24837 - CVSS 5.4 (medium), 2023-01-23: The Passster WordPress plugin before 3.5.5.8 does not escape the area parameter of its shortcode, which could allow users with a role as low as Contributor to…
- CVE-2022-3206 - CVSS 5.9 (medium), 2022-10-17: The Passster WordPress plugin before 3.5.5.5.2 stores the password inside a cookie named "passster" using base64 encoding method which is easy to decode. This…
