Description

WordPress Plugin Passster-Password Protection stores the password inside a cookie named "passster" using base64 encoding method which is easy to decode, if leaked. WordPress Plugin Passster-Password Protection version 3.5.5.5.1 is affected; prior versions may also be affected.

Remediation

Update to plugin version 3.5.5.5.2 or latest

References

https://wpscan.com/vulnerability/a8963750-62bf-403e-a906-94f371ed2a7a

https://plugins.svn.wordpress.org/content-protector/trunk/readme.txt

Related Vulnerabilities

MySQL CVE-2023-21887 Vulnerability (CVE-2023-21887)

WordPress Plugin vSlider Multi Image Slider for WordPress Multiple Vulnerabilities (4.1.2)

WordPress Plugin CM Download Manager Code Injection (2.0.3)

osCommerce Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-43728)

e107 Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2018-17081)

Severity

High

Classification

CVE-2022-3206 CWE-326 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Tags

Missing Update