Passster WordPress Plugin Sensitive Information Exposure Vulnerability

A vulnerability allowing sensitive information exposure has been identified in the Passster – Password Protect Pages and Content plugin for WordPress, affecting all versions through 4.2.10. This vulnerability arises from an unauthenticated content restriction bypass, enabling attackers to access sensitive data from posts restricted to higher-level roles, such as administrators, via the WordPress core search feature.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive information from restricted posts.

Remediation

Users are advised to update the Passster – Password Protect Pages and Content plugin to version 4.2.11 or a newer patched version.