Skip to main content

Passster Project

1 CVEs vendor

Monthly

CVE-2022-3206 Oct 17, 12:15 MEDIUM POC This Month

The Passster WordPress plugin before 3.5.5.5.2 stores the password inside a cookie named "passster" using base64 encoding method which is easy to decode. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required. Public exploit code available and no vendor patch available.

WordPress Information Disclosure Passster Passster Project
NVD WPScan
CVSS 3.1
5.9
EPSS
0.5%
EPSS 0% CVSS 5.9
MEDIUM POC This Month

The Passster WordPress plugin before 3.5.5.5.2 stores the password inside a cookie named "passster" using base64 encoding method which is easy to decode. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required. Public exploit code available and no vendor patch available.

WordPress Information Disclosure Passster +1
NVD WPScan

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy