Unauthorized Access Vulnerability in Passster WordPress Plugin for Content Protection
CVE-2026-16603
Currently unrated
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2026-16603?
The Passster WordPress plugin prior to version 4.3.6 contains a vulnerability that compromises category-based content protection. This flaw permits unauthenticated users to access the full content, titles, and excerpts of posts that are intended to be restricted through the WordPress REST API. As a result, sensitive content intended for certain user categories can be disclosed, posing a significant security risk to site administrators and content creators relying on this plugin for content protection.
Affected Version(s)
Passster 0 < 4.3.6
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.