CVE-2026-121776

Missing Authorization vulnerability in WP Chill Passster content-protector allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Passster: from n/a through 4.3.20...

CVE-2026-121776

The WP Chill Passster content-protector plugin (versions up to and including 4.3.20 ) is vulnerable to a Missing Authorization flaw. This issue allows for the exploitation of incorrectly configured access control security levels, potentially leading to unauthorized access. While the vulnerability...

CVE-2026-121776 WordPress Passster plugin <= 4.3.20 - Broken Access Control vulnerability

Missing Authorization vulnerability in WP Chill Passster content-protector allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Passster: from n/a through 4.3.20...

EUVD-2026-125421

Missing Authorization vulnerability in WP Chill Passster content-protector allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Passster: from n/a through 4.3.20...

CVE-2026-125409

The Passster – Password Protect Pages and Content plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in versions up to and including 4.3.21 . The root cause is insufficient input sanitization and output escaping of the metavalue parameter (specifically for metakeyinput=passst...

EUVD-2026-124982

The Passster – Password Protect Pages and Content plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'metavalue metakeyinput=passsterid | passsterheadline' parameter in all versions up to, and including, 4.3.21 due to insufficient input sanitization and output escaping. Thi...

PT-2026-146899

Missing Authorization vulnerability in WP Chill Passster content-protector allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Passster: from n/a through 4.3.20...

WordPress Passster – Password Protect Pages and Content plugin <= 4.3.21 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Wordfence PRISM in WordPress Plugin Passster versions = 4.3.21...

WordPress Passster plugin <= 4.3.20 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Malvin Valerian Gultom in WordPress Plugin Passster versions = 4.3.20...

CVE-2026-125454

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Chill Passster content-protector allows Stored XSS.This issue affects Passster: from n/a through 4.3.21...

EUVD-2026-123467

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Chill Passster content-protector allows Stored XSS.This issue affects Passster: from n/a through 4.3.21...

CVE-2026-125454

The WP Chill Passster content-protector plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) . This issue is caused by the improper neutralization of input during web page generation. The vulnerability affects Passster versions from n/a through 4.3.21 . Exploitation details and...

CVE-2026-125454 WordPress Passster plugin <= 4.3.21 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Chill Passster content-protector allows Stored XSS.This issue affects Passster: from n/a through 4.3.21...

WordPress Passster plugin <= 4.3.21 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by dzaku in WordPress Plugin Passster versions = 4.3.21...

CVE-2026-121574

Missing Authorization vulnerability in WP Chill Passster content-protector allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Passster: from n/a through 4.3.20...

EUVD-2026-123385

Missing Authorization vulnerability in WP Chill Passster content-protector allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Passster: from n/a through 4.3.20...

CVE-2026-121574

The WP Chill Passster content-protector plugin is affected by a Missing Authorization vulnerability (CWE-862) in versions 4.3.20 and below . This flaw allows for the exploitation of incorrectly configured access control security levels . While the specific root cause and practical consequences ar...

CVE-2026-121574 WordPress Passster plugin <= 4.3.20 - Broken Access Control vulnerability

Missing Authorization vulnerability in WP Chill Passster content-protector allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Passster: from n/a through 4.3.20...

WordPress Passster plugin <= 4.3.20 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Trent in WordPress Plugin Passster versions = 4.3.20...

PT-2026-145216

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Chill Passster content-protector allows Stored XSS.This issue affects Passster: from n/a through 4.3.21...