Skip to content
OpenAdvisories
Medium · 5.3 CVE-2025-15490 EUVD-2025-210832GHSA-r64m-vg32-6jh4

Passster < 4.2.26 - Global Protection Bypass

Published Sep 2, 2026 · Updated Sep 2, 2026 · Assigned by WPScan

Description

The Passster WordPress plugin before 4.2.26 has a flaw in its global protection checks, allowing unauthenticated users to bypass the protection offered via crafted URLs

Affected products

VendorProductAffectedFixed
— Passster < 4.2.26 4.2.26

References