Content Protector
by WordPress
Source repositories
CVEs (3)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-25036 | Med | 0.42 | 6.5 | 0.00 | Feb 3, 2026 | Missing Authorization vulnerability in WP Chill Passster content-protector allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Passster: from n/a through <= 4.2.25. | ||
| CVE-2025-14865 | Med | 0.35 | 6.4 | 0.00 | Jan 28, 2026 | The Passster – Password Protect Pages and Content plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'content_protector' shortcode in all versions up to, and including, 4.2.24. This makes it possible for authenticated attackers, with… | ||
| CVE-2026-62114 | Med | 0.34 | 5.3 | 0.00 | Sep 11, 2026 | Unauthenticated Broken Access Control in Passster <= 4.3.13 versions. |
- risk 0.42cvss 6.5epss 0.00
Missing Authorization vulnerability in WP Chill Passster content-protector allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Passster: from n/a through <= 4.2.25.
- risk 0.35cvss 6.4epss 0.00
The Passster – Password Protect Pages and Content plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'content_protector' shortcode in all versions up to, and including, 4.2.24. This makes it possible for authenticated attackers, with…
- risk 0.34cvss 5.3epss 0.00
Unauthenticated Broken Access Control in Passster <= 4.3.13 versions.