This vulnerability in WP Chill Passster (<= 4.2.25) involves missing authorization checks in the content-protector functionality, which results from incorrectly configured access control security levels. An attacker with low privileges and network access can exploit this issue without user interaction, potentially gaining unauthorized access to confidential information. The CVSS 3.1 vector indicates network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, high confidentiality impact, and no impact on integrity or availability.

The vulnerability allows unauthorized access to protected content due to missing authorization controls, potentially exposing confidential information. There is no impact on data integrity or system availability. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, review and tighten access control configurations in Passster. Monitor vendor channels for updates and apply patches promptly once available.