Information Disclosure in Passster Plugin for WordPress by Passster
CVE-2026-16604
Currently unrated
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2026-16604?
The Passster plugin for WordPress, prior to version 4.3.6, is susceptible to a vulnerability that exposes password-protected block content to unauthenticated users. This occurs because the plugin fails to properly verify the password before rendering the protected content in the public response. As a result, users can access sensitive information without authorization.
Affected Version(s)
Passster 0 < 4.3.6
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.