Plugin icon

Passster – Password Protect Pages and Content

content-protector

Vulnerabilities:

20

Last Updated:

October 2, 2026

Active Installs:

10000

Published
Title
Fixed in
CVSS
Published
2026-09-11
Title
Passster – Password Protect Pages and Content < 4.3.14 - Missing Authorization
Fixed in
Fixed in 4.3.14
CVSS
5.3 (medium)
Published
2026-08-17
Title
Content Protector (Passster) < 4.3.9 - Unauthenticated Protected Content Disclosure via REST Path Allowlist Bypass
Fixed in
Fixed in 4.3.9
CVSS
5.3 (medium)
Published
2026-08-03
Title
Content Protector (Passster) < 4.3.7 - Contributor+ Protected Content Disclosure via Core REST API
Fixed in
Fixed in 4.3.7
CVSS
2.7 (low)
Published
2026-07-27
Title
Content Protector (Passster) < 4.3.6 - Unauthenticated Non-Public Post Content Disclosure via Captcha REST Endpoint
Fixed in
Fixed in 4.3.6
CVSS
3.7 (low)
Published
2026-07-27
Title
Content Protector (Passster) < 4.3.6 - Unauthenticated Protected Content Disclosure via Content-Lock Block data-content Attribute
Fixed in
Fixed in 4.3.6
CVSS
5.3 (medium)
Published
2026-07-27
Title
Content Protector (Passster) < 4.3.6 - Unauthenticated Category-Locked Content Disclosure via Core REST API
Fixed in
Fixed in 4.3.6
CVSS
5.3 (medium)
Published
2026-02-17
Title
Passster < 4.2.24 - Password Protection Bypass
Fixed in
Fixed in 4.2.24
CVSS
5.3 (medium)
Published
2026-02-17
Title
Passster < 4.2.26 - Global Protection Bypass
Fixed in
Fixed in 4.2.26
CVSS
5.3 (medium)
Published
2026-02-12
Title
Passster < 4.2.26 - Missing Authorization
Fixed in
Fixed in 4.2.26
CVSS
4.3 (medium)
Published
2026-01-27
Title
Passster – Password Protect Pages and Content < 4.2.25 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Fixed in
Fixed in 4.2.25
CVSS
6.4 (medium)
Published
2025-11-12
Title
Passster < 4.2.20 - Unauthenticated Information Exposure
Fixed in
Fixed in 4.2.20
CVSS
5.3 (medium)
Published
2025-09-22
Title
Passster < 4.2.19 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 4.2.19
CVSS
6.4 (medium)
Published
2025-01-06
Title
Passster – Password Protect Pages and Content < 4.2.11 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
Fixed in
Fixed in 4.2.11
CVSS
5.3 (medium)
Published
2024-04-04
Title
Passster < 4.2.6.5 - Contributor+ Stored XSS via content_protector Shortcode
Fixed in
Fixed in 4.2.6.5
CVSS
5.9 (medium)
Published
2024-02-08
Title
Passster – Password Protect Pages and Content < 4.2.6.3 - Missing Authorization to Sensitive Information Exposure
Fixed in
Fixed in 4.2.6.3
CVSS
5.3 (medium)
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Fixed in
Fixed in 4.2.2
CVSS
6.1 (medium)
Published
2022-12-29
Title
Passster < 3.5.5.9 - Protection Bypass & Arbitrary Post Access
Fixed in
Fixed in 3.5.5.9
CVSS
7.5 (high)
Published
2022-12-29
Title
Passster < 3.5.5.8 - Contributor+ Stored Cross-Site Scripting
Fixed in
Fixed in 3.5.5.8
CVSS
6.8 (medium)
Published
2022-09-21
Title
Passster < 3.5.5.5.2 - Insecure Storage of Password
Fixed in
Fixed in 3.5.5.5.2
CVSS
5.3 (medium)
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Fixed in
Fixed in 3.5.5.2
CVSS
4.3 (medium)