Medium severity5.3NVD Advisory· Published Sep 2, 2026· Updated Sep 3, 2026
CVE-2025-15489
CVE-2025-15489
Description
The Passster WordPress plugin before 4.2.24 does not handle input properly in an AJAX action, allowing unauthenticated users to retrieve the value of password protected content
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1Patches
Vulnerability mechanics
References
1News mentions
1- WordPress Plugins: 24 Vulnerabilities Disclosed, Including Two Critical FlawsVypr Intelligence · Sep 2, 2026