Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: wpchill Component: Passster Clear all filters
TI-2024-10452 CVE-2024-11282 · GHSA-wg7g-4jwx-j6rf

Information disclosure in wpchill Passster – Password Protect Pages and Content

Priority LOW 39

The Passster – Password Protect Pages and Content plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.2.10 via the WordPress core search feature.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0041 Published 2025-01-07 No fix listed CWE-200
TI-2024-01886 CVE-2024-2026 · GHSA-p2r5-c3vr-q4j5

Passster <= 4.2.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via content_protector Shortcode

Priority LOW 29

The Passster plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's content_protector shortcode in all versions up to, and including, 4.2.6.4 due to insufficient input sanitization and output…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00501 Published 2024-04-09 No fix listed CWE-79