CVE-2026-110896

Missing Authorization vulnerability in WP Chill Passster content-protector allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Passster: from n/a through 4.3.18...

EUVD-2026-102869

Missing Authorization vulnerability in WP Chill Passster content-protector allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Passster: from n/a through 4.3.18...

CVE-2026-110896

The WP Chill Passster plugin (specifically the content-protector component) is vulnerable to a Missing Authorization (CWE-862) issue in versions through 4.3.18 . The flaw allows an unauthenticated network visitor to exploit incorrectly configured access control security levels. While the vulnerab...

CVE-2026-110896 WordPress Passster plugin <= 4.3.18 - Broken Access Control vulnerability

Missing Authorization vulnerability in WP Chill Passster content-protector allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Passster: from n/a through 4.3.18...

Rail-OT-Protector

⚠️ Repository Archived This repository has been archived and is no longer maintained. All development continues in the unified ICS OT Protector monorepo: https://github.com/spinfosecurity/ics-ot-protector Where to find this scanner Former repo| New location ---|--- Energy-Grid-Protector|...

NPM: vm2 sandbox escape on Node.js 26 through a stale PromiseThenLookupChain protector

NPM: vm2 sandbox escape on Node.js 26 through a stale PromiseThenLookupChain protector vulnerability discovered by ? in WordPress Npm vm2 versions = 3.10.2, = 3.11.6...

Akamai Joins Athena Coalition to Shield Users from New Vulnerabilities

Akamai joins Chainguard’s Athena Coalition, verifying that Akamai App & API Protector customers are automatically shielded from newly disclosed vulnerabilities...

CVE-2026-17559

Passster (Content Protector) WordPress plugin versions before 4.3.9 contain an unauthenticated information disclosure vulnerability in its REST API path allowlist logic. The plugin compares its own public endpoint paths as an unanchored substring of the request URI rather than against the resolve...

CVE-2025-15674 Content Protector (Passster) < 4.3.7 - Contributor+ Protected Content Disclosure via Core REST API

The Passster WordPress plugin before 4.3.7 does not restrict low-privilege users holding the editposts capability from reading globally password-protected content through the WordPress core REST API when global protection is enabled, allowing any Contributor or higher to read the content of...

CVE-2025-15674

Passster (WordPress plugin) before 4.3.7 allows low-privilege users with edit_posts capability to read globally password-protected content via the WordPress REST API when global protection is enabled. Any Contributor or higher can access protected pages/posts without the password. A fix is availa...

CVE-2026-16604

The Passster (also known as Content Protector ) WordPress plugin versions prior to 4.3.6 is vulnerable to unauthenticated protected content disclosure . The root cause is that the plugin outputs password-protected block content in the public page response before performing password verification. ...

WordPress defa-online-image-protector <=3.3 - Cross-Site Scripting Detection

WordPress defa-online-image-protector 3.3 and before contains a reflected cross-site scripting vulnerability which allows an attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based...

EUVD-2026-49658

Unauthenticated Broken Access Control in Ad Invalid Click Protector AICP = 1.3.0 versions...

CVE-2026-65445

Unauthenticated Broken Access Control in Ad Invalid Click Protector AICP = 1.3.0 versions...

CVE-2026-65445 WordPress Ad Invalid Click Protector (AICP) plugin <= 1.3.0 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Ad Invalid Click Protector AICP = 1.3.0 versions...

CVE-2026-65445

The CVE-2026-65445 entry concerns the WordPress Ad Invalid Click Protector (AICP) plugin and its

CVE-2026-65445

Unauthenticated Broken Access Control in Ad Invalid Click Protector AICP = 1.3.0 versions...

CVE-2026-65445 WordPress Ad Invalid Click Protector (AICP) plugin <= 1.3.0 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Ad Invalid Click Protector AICP = 1.3.0 versions...

WordPress Ad Invalid Click Protector (AICP) plugin <= 1.3.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Ad Invalid Click Protector AICP versions = 1.3.0...

PT-2026-65323

Name of the Vulnerable Software and Affected Versions Ad Invalid Click Protector AICP versions prior to 1.3.1 Description Broken Access Control allows unauthenticated users to bypass security restrictions within the plugin. Recommendations Update Ad Invalid Click Protector AICP to a version newer...