CVE-2026-110896: Missing Authorization in WP Chill Passster

This vulnerability in WP Chill Passster content-protector arises from missing authorization checks, enabling exploitation of incorrectly configured access control security levels. It affects all versions from the initial release through 4.3.18. The CVSS 3.1 vector indicates the attack can be performed remotely without privileges or user interaction, impacting confidentiality with limited data exposure but no integrity or availability impact.

An attacker can exploit the missing authorization to gain unauthorized access to protected content or functionality within the Passster plugin. The impact is limited to partial confidentiality loss without affecting integrity or availability. There are no known exploits in the wild at this time.

No explicit patch or remediation information is provided. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, review and tighten access control configurations in Passster to mitigate unauthorized access risks.