Medium
CVE-2026-62114
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 21
Reset filters
Medium
CVE-2026-17559
Passster – Password Protect Pages and Content < 4.3.9 - Missing Authorization
Medium
CVE-2026-16604
Passster – Password Protect Pages and Content < 4.3.6 - Missing Authorization
Medium
CVE-2025-15674
Content Protector (Passster) <= 4.3.6 - Authenticated (Contributor+) Sensitive Information Exposure
Medium
CVE-2026-16603
Content Protector (Passster) <= 4.3.5 - Unauthenticated Category-Locked Content Disclosure
Medium
CVE-2026-16602
Content Protector (Passster) <= 4.3.5 - Unauthenticated Non-Public Post Content Disclosure
Medium
CVE-2025-15489
Passster <= 4.2.23 - Unauthenticated Protected Content Disclosure
Medium
CVE-2025-15490
Passster <= 4.2.25 - Unauthenticated Global Content Protection Bypass
Medium
CVE-2026-25036
Passster <= 4.2.25 - Missing Authorization
Medium
CVE-2025-14865
Passster – Password Protect Pages and Content <= 4.2.24 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2025-64218
Passster <= 4.2.19 - Unauthenticated Information Exposure
Medium
CVE-2025-57926
Passster <= 4.2.18 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-11282
Passster – Password Protect Pages and Content <= 4.2.10 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
Medium
CVE-2024-2026
Passster <= 4.2.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via content_protector Shortcode
Medium
CVE-2024-0616
Passster – Password Protect Pages and Content <= 4.2.6.2 - Missing Authorization to Sensitive Information Exposure
Medium
CVE-2023-33999
Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get
Medium
CVE-2023-25048
Fantastic Content Protector Free <= 2.6 - Missing Authorization via update_setting_fantastic_content_protector
Medium
CVE-2021-24881
Passster <= 3.5.5.8 - Missing Authentication leading to Sensitive Information Disclosure (Private Post Leakage)
Medium
CVE-2021-24837
Passster – Password Protection <= 3.5.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-3206
Passster <= 3.5.5.5.1 - Insecure Password Storage to Sensitive Data Exposure
Medium
CVE-2022-4974
Freemius SDK <= 2.4.2 - Missing Authorization Checks
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.