Passster < 3.5.5.9 - Protection Bypass & Arbitrary Post Access

CVE-2021-24881

Summary

The Passster WordPress plugin prior to version 3.5.5.9 contains a security flaw where it fails to adequately verify the password and the visibility status of posts. This flaw allows unauthenticated individuals to access restricted content by exploiting the plugin's weaknesses, thus breaching the intended access controls and potentially exposing private posts. A crafted request can lead to unauthorized exposure of sensitive information.

References