Read the docs

Passster Project

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Passster Project records in CISA KEV

No Passster Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Passter 2 records HIGH Passster 1 record LOW

Records

2 records in Passter · all components

TI-2021-07163 CVE-2021-24881 · GHSA-c58r-vwf8-vx95

Passster < 3.5.5.9 - Protection Bypass & Arbitrary Post Access

Priority HIGH 72

The Passster WordPress plugin before 3.5.5.9 does not properly check for password, as well as that the post to be viewed is public, allowing unauthenticated users to bypass the protection offered by the plugin, and acces…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00826 Published 2023-01-23 Fixed in 3.5.5.9
TI-2021-07119 CVE-2021-24837 · GHSA-mj4m-mqjg-cm54

Passster < 3.5.5.8 - Contributor+ Stored Cross-Site Scripting

Priority LOW 25

The Passster WordPress plugin before 3.5.5.8 does not escape the area parameter of its shortcode, which could allow users with a role as low as Contributor to perform Cross-Site Scripting attacks.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00404 Published 2023-01-23 Fixed in 3.5.5.8
Open these records in search →