Threats tagged 'ghsa-wqxf-2hrv-jrwq'

CVE-2025-15674 is an authorization vulnerability in the Passster WordPress plugin before version 4.3.7. It allows users with the edit_posts capability, such as Contributors or higher, to read globally password-protected content via the WordPress REST API without knowing the password when global protection is enabled. The vulnerability does not affect availability or integrity and has a low CVSS score of 2.7.