CVE-2021-24881

Katalog CVE

CVSS 7.5 · High EPSS 0,82%

Kerentanan pada passster project passter. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

The Passster WordPress plugin before 3.5.5.9 does not properly check for password, as well as that the post to be viewed is public, allowing unauthenticated users to bypass the protection offered by the plugin, and access arbitrary posts (such as private) content, by sending a specifically crafted request.

Rincian

Terbit di NVD

23 Januari 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

EPSS (30 hari)

0,82% peluang dieksploitasi; lebih tinggi dari 56,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://wpscan.com/vulnerability/0967303d-ea49-4993-84eb-a7ec97240071 exploit · advisory pihak ketiga