Passster – Password Protect Pages and Content, CVE-2022-3206
- CVE, Research URL
- Published on
- Oct 17, 2022
- Research Description
- The Passster WordPress plugin before 3.5.5.5.2 stores the password inside a cookie named "passster" using base64 encoding method which is easy to decode. This puts the password at risk in case the cookies get leaked.
- Affected versions
-
max 3.5.5.2.
- Status
-
vulnerable