CVE-2026-121574: WordPress Passster plugin <= 4.3.20 - Broken Access Control vulnerability
Missing Authorization vulnerability in WP Chill Passster content-protector allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Passster: from n/a through 4.3.20.
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress Passster pluginto a version that resolves this vulnerability.Fixed in 4.3.21
Event History
Frequently Asked Questions
Which Passster installations are affected?
Passster versions through 4.3.20 are affected. The available data does not identify a lower fixed boundary or specific configuration requirements.
Does exploitation require authentication or user interaction?
No. The CVSS vector indicates network-based exploitation with low attack complexity, no privileges required, and no user interaction required.
What is the expected impact?
The reported impact is limited confidentiality loss. The CVSS vector indicates no integrity or availability impact.