Passster – Password Protect Pages and Content, CVE-2021-24881

CVE, Research URL: CVE-2021-24881
Home page URL: Security reports for Passster – Password Protect Pages and Content
Application: Passster – Password Protect Pages and Content
Published on: Jan 23, 2023
Research Description: The Passster WordPress plugin before 3.5.5.9 does not properly check for password, as well as that the post to be viewed is public, allowing unauthenticated users to bypass the protection offered by the plugin, and access arbitrary posts (such as private) content, by sending a specifically crafted request.
Affected versions: max 3.5.5.9.
Status: vulnerable

Passster &#8211; Password Protect Pages and Content, CVE-2021-24881