Approved changes feed: RSS · Atom
cpe:2.3:a:unknown:passster:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Unknown (668ca391-a6cc-5e33-879b-83885214de33) |
|---|---|
| Product | Passster (a9cbc2a4-e9bb-5e90-9847-8b8dfcc0bc3a) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-16603 |
vulnerable | 2026-09-16 04:32:57.117064 |
Content Protector (Passster) < 4.3.6 - Unauthenticated Category-Locked Content Disclosure via Core REST API
The Passster WordPress plugin before 4.3.6 does not enforce its category-based content protection on the WordPress REST API, allowing unauthenticated users to read the full content, title, and excerpt of category-locked posts through the core REST API.
Published: 2026-08-05T06:00:09.588Z
Updated: 2026-08-05T15:20:22.641Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-16602 |
vulnerable | 2026-09-16 04:32:56.791539 |
Content Protector (Passster) < 4.3.6 - Unauthenticated Non-Public Post Content Disclosure via Captcha REST Endpoint
The Passster WordPress plugin before 4.3.6 does not perform a post-status check before returning post content from an unauthenticated REST endpoint, allowing unauthenticated users to disclose the content of non-public (draft, private, and pending) posts on sites that have a captcha provider configured.
Published: 2026-08-05T06:00:09.409Z
Updated: 2026-08-05T15:20:52.550Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-16604 |
vulnerable | 2026-09-16 04:32:56.569863 |
Content Protector (Passster) < 4.3.6 - Unauthenticated Protected Content Disclosure via Content-Lock Block data-content Attribute
The Passster WordPress plugin before 4.3.6 outputs password-protected block content in the public page response before verifying the password, allowing unauthenticated users to recover the protected content without knowing the password.
Published: 2026-08-05T06:00:09.761Z
Updated: 2026-08-05T15:19:52.879Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-15674 |
vulnerable | 2026-09-16 04:27:18.578507 |
Content Protector (Passster) < 4.3.7 - Contributor+ Protected Content Disclosure via Core REST API
LOW (2.7)
The Passster WordPress plugin before 4.3.7 does not restrict low-privilege users holding the edit_posts capability from reading globally password-protected content through the WordPress core REST API when global protection is enabled, allowing any Contributor or higher to read the content of protected pages and posts without knowing the password.
Published: 2026-08-06T17:17:18.142Z
Updated: 2026-08-07T14:16:35.865Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-3206 |
vulnerable | 2026-06-08 05:47:19.718338 |
Passster < 3.5.5.5.2 - Insecure Storage of Password
The Passster WordPress plugin before 3.5.5.5.2 stores the password inside a cookie named "passster" using base64 encoding method which is easy to decode. This puts the password at risk in case the cookies get leaked.
Published: 2022-10-17T00:00:00.000Z
Updated: 2025-05-14T20:15:49.826Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-24881 |
vulnerable | 2026-06-08 05:30:39.551111 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-24837 |
vulnerable | 2026-06-08 05:30:39.329034 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.