5.9
Moyenne
CVE-2022-3206 The Passster WordPress plugin before 3.5.5.5.2 stores the password inside a cookie named "passster" using base64…
Description
The Passster WordPress plugin before 3.5.5.5.2 stores the password inside a cookie named "passster" using base64 encoding method which is easy to decode. This puts the password at risk in case the cookies get leaked.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Passster 3.5 | premières → < 3.5.5.5.2 | 3.5.5.5.2 |
Autres CVE de Passster
Les 10 CVE de Passster →
CVE-2025-15490
The Passster WordPress plugin before 4.2.26 has a flaw in its global protection checks, allowing unauthenticated users…
5.3
Moyenne
CVE-2025-15489
The Passster WordPress plugin before 4.2.24 does not handle input properly in an AJAX action, allowing unauthenticated…
5.3
Moyenne
CVE-2026-17559
The Passster WordPress plugin before 4.3.9 does not correctly match its own public endpoint paths when deciding which…
5.3
Moyenne
CVE-2025-15674
The Passster WordPress plugin before 4.3.7 does not restrict low-privilege users holding the edit_posts capability…
2.7
Faible