| CVE-2025-15490 |
The Passster WordPress plugin before 4.2.26 has a flaw in its global protection checks, allowing unauthenticated users…
|
5.3
Moyenne
|
2 sept. 2026 |
| CVE-2025-15489 |
The Passster WordPress plugin before 4.2.24 does not handle input properly in an AJAX action, allowing unauthenticated…
|
5.3
Moyenne
|
2 sept. 2026 |
| CVE-2026-17559 |
The Passster WordPress plugin before 4.3.9 does not correctly match its own public endpoint paths when deciding which…
|
5.3
Moyenne
|
21 août 2026 |
| CVE-2025-15674 |
The Passster WordPress plugin before 4.3.7 does not restrict low-privilege users holding the edit_posts capability…
|
2.7
Faible
|
6 août 2026 |
| CVE-2026-16602 |
The Passster WordPress plugin before 4.3.6 does not perform a post-status check before returning post content from an…
|
7.5
Élevée
|
5 août 2026 |
| CVE-2026-16603 |
The Passster WordPress plugin before 4.3.6 does not enforce its category-based content protection on the WordPress REST…
|
7.5
Élevée
|
5 août 2026 |
| CVE-2026-16604 |
The Passster WordPress plugin before 4.3.6 outputs password-protected block content in the public page response…
|
7.5
Élevée
|
5 août 2026 |
| CVE-2021-24837 |
The Passster WordPress plugin before 3.5.5.8 does not escape the area parameter of its shortcode, which could allow…
|
Non notée
|
23 janv. 2023 |
| CVE-2021-24881 |
The Passster WordPress plugin before 3.5.5.9 does not properly check for password, as well as that the post to be viewed…
|
7.5
Élevée
|
23 janv. 2023 |
| CVE-2022-3206 |
The Passster WordPress plugin before 3.5.5.5.2 stores the password inside a cookie named "passster" using base64…
|
5.9
Moyenne
|
17 oct. 2022 |