Read the docs

Passster Project

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Passster Project records in CISA KEV

No Passster Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Passter 2 records HIGH Passster 1 record LOW

Records

1 record in Passster · all components

TI-2022-02961 CVE-2022-3206 · GHSA-7j63-969g-r2jp

Passster < 3.5.5.5.2 - Insecure Storage of Password

Priority LOW 27

The Passster WordPress plugin before 3.5.5.5.2 stores the password inside a cookie named "passster" using base64 encoding method which is easy to decode.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00586 Published 2022-10-17 Fixed in 3.5.5.5.2 CWE-319
Open these records in search →