5.3
Medium
CVE-2025-15490 The Passster WordPress plugin before 4.2.26 has a flaw in its global protection checks, allowing unauthenticated users…
Description
The Passster WordPress plugin before 4.2.26 has a flaw in its global protection checks, allowing unauthenticated users to bypass the protection offered via crafted URLs
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Passster 4.2 | earliest → < 4.2.26 | 4.2.26 |
References
- wpscan.com wpscan.com
Timeline
- Published
- Last modified
Other CVEs of Passster
The 10 CVEs of Passster →
CVE-2025-15489
The Passster WordPress plugin before 4.2.24 does not handle input properly in an AJAX action, allowing unauthenticated…
5.3
Medium
CVE-2026-17559
The Passster WordPress plugin before 4.3.9 does not correctly match its own public endpoint paths when deciding which…
5.3
Medium
CVE-2025-15674
The Passster WordPress plugin before 4.3.7 does not restrict low-privilege users holding the edit_posts capability…
2.7
Low
CVE-2026-16604
The Passster WordPress plugin before 4.3.6 outputs password-protected block content in the public page response…
7.5
High