WordPress Content Protector (Passster) plugin < 4.3.7 - Contributor+ Protected Content Disclosure via Core REST API vulnerability

Contributor+ Protected Content Disclosure via Core REST API vulnerability discovered by Pierre Rudloff in WordPress Plugin Passster versions 4.3.7...

CVE-2026-16604

The Passster (also known as Content Protector ) WordPress plugin versions prior to 4.3.6 is vulnerable to unauthenticated protected content disclosure . The root cause is that the plugin outputs password-protected block content in the public page response before performing password verification. ...