Passster vulnerabilities
We track 3 vulnerabilities in Passster products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on August 5, 2026.
Latest Passster vulnerabilities
- 7.5 High severity
Passster: Exposure of Sensitive Information to an Unauthorized Actor
The Passster WordPress plugin before 4.3.6 outputs password-protected block content in the public page response before verifying the password, allowing unauthenticated users to recover the protected content without knowing the password.
- 7.5 High severity
Passster: Exposure of Sensitive Information to an Unauthorized Actor
The Passster WordPress plugin before 4.3.6 does not enforce its category-based content protection on the WordPress REST API, allowing unauthenticated users to read the full content, title, and excerpt of category-locked posts through the core REST API.
- 7.5 High severity
Passster: Exposure of Sensitive Information to an Unauthorized Actor
The Passster WordPress plugin before 4.3.6 does not perform a post-status check before returning post content from an unauthenticated REST endpoint, allowing unauthenticated users to disclose the content of non-public (draft, private, and pending) posts on sit