CVE-2026-121574mediumCWE-862

CVE-2026-121574: medium-severity vulnerability in WP Chill Passster

WordPress Passster plugin <= 4.3.20 - Broken Access Control vulnerability

Published

Follow this CVE+ Monitor Passster

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

10Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.3
Missing Authorization vulnerability in WP Chill Passster content-protector allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Passster: from n/a through 4.3.20.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected products
WP Chill · Passster
Related CVEs — WP Chill Passster

In the same product, most dangerous first.

CVE-2025-64218HIGHWordPress Passster plugin <= 4.2.19 - Sensitive Data Exposure vulnerabilityEPSS 0.3%CVE-2026-25036MEDIUMWordPress Passster plugin <= 4.2.25 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-62114MEDIUMWordPress Passster plugin <= 4.3.13 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2025-57926MEDIUMWordPress Passster Plugin <= 4.2.18 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2026-110896MEDIUMWordPress Passster plugin <= 4.3.18 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-125454MEDIUMWordPress Passster plugin <= 4.3.21 - Cross Site Scripting (XSS) vulnerabilityEPSS —