CVE-2026-121776: WordPress Passster plugin <= 4.3.20 - Broken Access Control vulnerability

Q: Which Passster versions are affected?

The issue affects Passster versions through 4.3.20. The available data does not identify a first fixed version.

Q: Does exploitation require authentication or user interaction?

The CVSS vector indicates that exploitation can be performed over the network with low attack complexity, without privileges or user interaction.

Q: What is the likely impact if exploited?

The vulnerability is an access-control issue with low confidentiality and integrity impact. The CVSS vector indicates no availability impact.

Published Nov 13, 2026

Updated

Missing Authorization vulnerability in WP Chill Passster content-protector allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Passster: from n/a through 4.3.20.

Affected Software

1 affected component

wordpress/passster<=4.3.20

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 4.3.21

Event History

Nov 13, 2026

CVE Published

via MITRE·03:08 PM

Data Sourced

via MITRE·03:08 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·03:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Which Passster versions are affected?

The issue affects Passster versions through 4.3.20. The available data does not identify a first fixed version.

Does exploitation require authentication or user interaction?

The CVSS vector indicates that exploitation can be performed over the network with low attack complexity, without privileges or user interaction.

What is the likely impact if exploited?

The vulnerability is an access-control issue with low confidentiality and integrity impact. The CVSS vector indicates no availability impact.

CVE-2026-121776: WordPress Passster plugin <= 4.3.20 - Broken Access Control vulnerability

Affected Software

Remediation

Event History

Frequently Asked Questions

Which Passster versions are affected?

Does exploitation require authentication or user interaction?

What is the likely impact if exploited?

Company

Resources

Contact

Frequently Asked Questions

Which Passster versions are affected?

Does exploitation require authentication or user interaction?

What is the likely impact if exploited?