CVE-2021-24881

creationtimestamp| type| source ---|---|--- 2025-04-02 15:33:35+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10104...

CVE-2021-24881 Passster < 3.5.5.9 - Protection Bypass & Arbitrary Post Access

The Passster WordPress plugin before 3.5.5.9 does not properly check for password, as well as that the post to be viewed is public, allowing unauthenticated users to bypass the protection offered by the plugin, and access arbitrary posts such as private content, by sending a specifically crafted...

CVE-2021-24881 Passster < 3.5.5.9 - Protection Bypass & Arbitrary Post Access

The Passster WordPress plugin before 3.5.5.9 does not properly check for password, as well as that the post to be viewed is public, allowing unauthenticated users to bypass the protection offered by the plugin, and access arbitrary posts such as private content, by sending a specifically crafted...

CVE-2021-24881

CVE-2021-24881 affects the Passster WordPress plugin prior to version 3.5.5.9. The issue is that the plugin does not properly validate passwords and the post’s public/private status, allowing unauthenticated users to bypass protections and access arbitrary posts (including private content) via cr...

WordPress Passster – Password Protection Plugin < 3.5.5.9 is vulnerable to Broken Access Control

Software Passster – Password Protection Type Plugin Vulnerable versions 3.5.5.9 Fixed in 3.5.5.9 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2021-24881 Patch priority Low CVSS severity Low 5.3 Developer Patrick Posner PSID 3b75ba83694c Credits dc11 Required...