Access Control Flaw in WP Chill Passster Content-Protector by WordPress
CVE-2026-25036

Currently unrated

Key Information:

Vendor

WordPress

Status
Vendor
CVE Published:
3 February 2026

What is CVE-2026-25036?

The WP Chill Passster Content-Protector has a vulnerability related to missing authorization, allowing attackers to exploit misconfigured access control security levels. This issue affects all versions up to and including 4.2.25, potentially granting unauthorized access to sensitive content. It's crucial for site owners using this plugin to reassess their settings and apply proper security measures to protect against unauthorized access.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Affected Version(s)

Passster <= n/a

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

johska | Patchstack Bug Bounty Program
.