CVE-2026-16604 in Passster Plugin

Sumário

de MITRE • 05/08/2026

The Passster WordPress plugin before 4.3.6 outputs password-protected block content in the public page response before verifying the password, allowing unauthenticated users to recover the protected content without knowing the password.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Responsável: WPScan
• Reservar: 22/07/2026
• Divulgação: 05/08/2026
• Moderação: aceite
• Entrada: VDB-386057
• CPE: pronto
• CWE: CWE-200 (confirmado)
• CVSS: 5.3 (VulDB)
• EPSS: 0.00156
• KEV: não
• Atividades: baixo
• Sector: Hostingprovider

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-16604
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-16604
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-16604/