→ برگشت به فید آسیب‌پذیری‌ها CVE-2026-16603 · content-protector

آسیب‌پذیری امنیتی در افزونه Passster – Password Protect Pages and Content

The Content Protector (Passster) plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 4.3.5. This is due to missing filtering of rendered content and excerpt fields for category-locked posts in the REST API response, allowing the core REST API to bypass the category-lock protection entirely. This makes it possible for unauthenticated attackers to access category-locked post content in plaintext via the WordPress core REST API without providing a valid password.