| CVE-2025-15490 |
The Passster WordPress plugin before 4.2.26 has a flaw in its global protection checks, allowing unauthenticated users…
|
5.3
Medium
|
Sep 2, 2026 |
| CVE-2025-15489 |
The Passster WordPress plugin before 4.2.24 does not handle input properly in an AJAX action, allowing unauthenticated…
|
5.3
Medium
|
Sep 2, 2026 |
| CVE-2026-17559 |
The Passster WordPress plugin before 4.3.9 does not correctly match its own public endpoint paths when deciding which…
|
5.3
Medium
|
Aug 21, 2026 |
| CVE-2025-15674 |
The Passster WordPress plugin before 4.3.7 does not restrict low-privilege users holding the edit_posts capability…
|
2.7
Low
|
Aug 6, 2026 |
| CVE-2026-16602 |
The Passster WordPress plugin before 4.3.6 does not perform a post-status check before returning post content from an…
|
7.5
High
|
Aug 5, 2026 |
| CVE-2026-16603 |
The Passster WordPress plugin before 4.3.6 does not enforce its category-based content protection on the WordPress REST…
|
7.5
High
|
Aug 5, 2026 |
| CVE-2026-16604 |
The Passster WordPress plugin before 4.3.6 outputs password-protected block content in the public page response…
|
7.5
High
|
Aug 5, 2026 |
| CVE-2021-24837 |
The Passster WordPress plugin before 3.5.5.8 does not escape the area parameter of its shortcode, which could allow…
|
Not rated
|
Jan 23, 2023 |
| CVE-2021-24881 |
The Passster WordPress plugin before 3.5.5.9 does not properly check for password, as well as that the post to be viewed…
|
7.5
High
|
Jan 23, 2023 |
| CVE-2022-3206 |
The Passster WordPress plugin before 3.5.5.5.2 stores the password inside a cookie named "passster" using base64…
|
5.9
Medium
|
Oct 17, 2022 |