PatchTheCVEpassster project vulnerabilities
Recent CVEs affecting passster project products. 3 tracked.
passster project has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2023-01-23. Highest priority: CVE-2021-24881 (score 51/100).
- CVE-2022-3206 MEDIUM 5.9 UPGRADE The Passster WordPress plugin before 3.5.5.5.2 stores the password inside a cookie named "passster" using base
- CVE-2021-24881 HIGH 7.5 UPGRADE The Passster WordPress plugin before 3.5.5.9 does not properly check for password, as well as that the post to
- CVE-2021-24837 MEDIUM 5.4 UPGRADE The Passster WordPress plugin before 3.5.5.8 does not escape the area parameter of its shortcode, which could
FAQ
How do I fix passster project vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is passster project being exploited right now?
None of the tracked passster project CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which passster project CVE should I patch first?
CVE-2021-24881 currently ranks highest (51/100): The Passster WordPress plugin before 3.5.5.9 does not properly check for password, as well as that the post to.