Vulnerability in Passster Project Passter
CVE-2021-24881
The Passster WordPress plugin before 3.5.5.9 does not properly check for password, as well as that the post to be viewed is public, allowing unauthenticated users to bypass the protection offered by the plugin, and access arbitrary posts (such as private) content, by sending a specifically crafted request.
EPSS: 0.008 (53.5th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.
Affected products
- Passster_project Passter
- Unknown Passster — versions 0
Public proof-of-concept exploits
References
- contact@wpscan.com (Exploit, technical-description, Third Party Advisory, exploit, vdb-entry)
Frequently asked questions
- What is CVE-2021-24881?
- CVE-2021-24881 is a high-severity vulnerability in Passster Project Passter, classified under CWE-287 IMPROPER AUTHENTICATION. CVSS score: 7.5/10. Published 2023-01-23.
- How severe is CVE-2021-24881?
- High severity. CVSS v3 base score is 7.5 out of 10.
- Is CVE-2021-24881 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.