CVE-2026-110896: WordPress Passster plugin <= 4.3.18 - Broken Access Control vulnerability
Missing Authorization vulnerability in WP Chill Passster content-protector allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Passster: from n/a through 4.3.18.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress Passster pluginto a version that resolves this vulnerability.Fixed in 4.3.19
Event History
Frequently Asked Questions
Which Passster versions are affected?
The issue affects Passster versions through 4.3.18. The available data does not identify a fixed version.
What access does an attacker need to exploit this issue?
The CVSS vector indicates that exploitation can be performed remotely with low attack complexity, without privileges or user interaction. The impact is limited to confidentiality according to the provided vector.
Is the default Passster configuration known to be vulnerable?
The available information describes exploitation of incorrectly configured access-control security levels. It does not state whether default configurations are affected.