blogsafe.org My Downloads

BlogSafe.org

WordPress CVEs

Search and review WordPress-related vulnerability records.

← Back to CVE list

CVE-2021-24881

HIGH 7.5 CVSS 3.1
Published
January 23, 2023
Last modified
June 17, 2026
NVD status
Modified
Reported by
contact@wpscan.com
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

The Passster WordPress plugin before 3.5.5.9 does not properly check for password, as well as that the post to be viewed is public, allowing unauthenticated users to bypass the protection offered by the plugin, and access arbitrary posts (such as private) content, by sending a specifically crafted request.

Affected WordPress components

  • Passster – Password Protect Pages and Content Plugin · content-protector
    Confirmed match Active
    Before 3.5.5.9
    View on WordPress.org

A confirmed match is backed by the plugin or theme slug. A possible match is based on the product name only and should be verified.

Affected products and versions

  • Unknown Passster — Before 3.5.5.9
  • passster_project passter — Before 3.5.5.9

References

  • wpscan.com https://wpscan.com/vulnerability/0967303d-ea49-4993-84eb-a7ec97240071 Exploit, Third Party Advisory
  • nvd.nist.gov Official NVD record