Vulnerability · Published Feb 20, 2024 · Assigned by Wordfence
CVE-2024-0616Passster – Password Protect Pages and Content <= 4.2.6.2 - Missing Authorization to Sensitive Information Exposure
Medium 5.3
In plain English
A medium-severity information exposure in Passster – Password Protect Pages and Content from wpchill. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 42% of all known vulnerabilities).
Official description
The Passster – Password Protect Pages and Content plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.2.6.2 via API. This makes it possible for unauthenticated attackers to obtain post titles, slugs, IDs, content and other metadata including passwords of password-protected posts and pages.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| wpchill | Passster – Password Protect Pages and Content | 0 – through 4.2.6.2 |
Weakness: CWE-200 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N