WordPress Passster 4.3.18 Broken Access Control

WordPress Passster versions 4.3.18 and earlier contain a broken access control vulnerability that permits unauthenticated access to pages or actions that should be restricted...

CVE-2026-110896

Missing Authorization vulnerability in WP Chill Passster content-protector allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Passster: from n/a through 4.3.18...

EUVD-2026-102869

Missing Authorization vulnerability in WP Chill Passster content-protector allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Passster: from n/a through 4.3.18...

CVE-2026-110896 WordPress Passster plugin <= 4.3.18 - Broken Access Control vulnerability

Missing Authorization vulnerability in WP Chill Passster content-protector allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Passster: from n/a through 4.3.18...

CVE-2026-110896

The WP Chill Passster plugin (specifically the content-protector component) is vulnerable to a Missing Authorization (CWE-862) issue in versions through 4.3.18 . The flaw allows an unauthenticated network visitor to exploit incorrectly configured access control security levels. While the vulnerab...

WordPress Passster plugin <= 4.3.18 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by azqzazq1 in WordPress Plugin Passster versions = 4.3.18...

PT-2026-115589

Name of the Vulnerable Software and Affected Versions Passster versions prior to 4.3.19 Description A missing authorization issue in the WP Chill Passster content-protector allows for the exploitation of incorrectly configured access control security levels. Recommendations Update to version 4.3....

CVE-2026-110896: Missing Authorization

Missing Authorization vulnerability in WP Chill Passster content-protector allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Passster: from n/a through 4.3.18...

CVE-2026-62114

Unauthenticated Broken Access Control in Passster = 4.3.13 versions...

CVE-2026-62114 WordPress Passster plugin <= 4.3.13 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Passster = 4.3.13 versions...

EUVD-2026-76206

Unauthenticated Broken Access Control in Passster = 4.3.13 versions...

CVE-2026-62114 WordPress Passster plugin <= 4.3.13 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Passster = 4.3.13 versions...

CVE-2026-62114

Unauthenticated Broken Access Control in the WordPress Passster plugin, affecting versions ≤ 4.3.13 . Discovered by Salúa Es-sair (via Patchstack), the flaw allows an unauthenticated attacker over the network with low complexity to achieve low confidentiality impact (CVSS 5.3 / MEDIUM). No integr...

WordPress Passster plugin <= 4.3.13 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Salúa Es-sair in WordPress Plugin Passster versions = 4.3.13...

CVE-2026-62114: Missing Authorization

Unauthenticated Broken Access Control in Passster = 4.3.13 versions...

PT-2026-90029

Unauthenticated Broken Access Control in Passster = 4.3.13 versions...

CVE-2025-15490

The Passster WordPress plugin before 4.2.26 has a flaw in its global protection checks, allowing unauthenticated users to bypass the protection offered via crafted URLs...

CVE-2025-15489

The Passster WordPress plugin before 4.2.24 does not handle input properly in an AJAX action, allowing unauthenticated users to retrieve the value of password protected content...

CVE-2025-15490 Passster < 4.2.26 - Global Protection Bypass

The Passster WordPress plugin before 4.2.26 has a flaw in its global protection checks, allowing unauthenticated users to bypass the protection offered via crafted URLs...

CVE-2025-15490

Passster WordPress plugin versions before 4.2.26 contain a flaw in its global protection checks , enabling unauthenticated users to bypass the plugin's protection mechanism via crafted URLs. The impact is rated Medium (CVSS 5.3) with a low confidentiality impact and no integrity or availability i...