Passster – Password Protect Pages and Content
Passster – Password Protect Pages and Content has 17 disclosed vulnerabilities in the WordSec catalog, reported between 2022 and 2026; all 17 are fixed as of September 2026. Their average CVSS score is 5.5, and the most serious one scores 6.4 out of 10. 2026 was the busiest year with 7 disclosures.
The most common weakness is Exposure Of Sensitive Information To An Unauthorized Actor, behind 6 of the records (35%). Other recurring categories include Cross-Site Scripting, Missing Authorization.
Every one of the 17 issues recorded for Passster – Password Protect Pages and Content has a vendor fix available, so running the current release closes all known holes.
12 independent researchers contributed these findings, most of them (3) reported by Revanth Hari Narayana Matte. Passster – Password Protect Pages and Content is installed on roughly 10,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.
CVE-2025-14865Passster – Password Protect Pages and Content <= 4.2.24 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Read the full analysisVulnerability Records

Passster – Password Protect Pages and Content
Author
WP Chill
Password Protect Pages, Posts & Content in WordPress Passster is an all-in-one plugin to password protect pages, content, or your entire site in seconds—quick, secure, and easy to use. Passster offers three protection modes to cover every use case you may think of when it comes to password protecting your WordPress website. Passster Pro – Even more protection features when making a purchase Multiple Passwords & Password Lists – Assign multiple passwords for different users. – Create and manage large password lists for easy control. Quick & Bulk Edit for Password Protection – Use WordPress Quick Edit and Bulk Edit to protect multiple pages instantly. Unlock Content by User Role or Email – Automatically grant access to specific users or email addresses. Password Expiration & Usage Limits – Set passwords to expire after a number of uses, first use, or by a time limit (hours, days, weeks). – Track which passwords were used and when they will expire. Generate Unlock Links – Create encrypted unlock links so users can access content without entering a password. – Automatically shorten links with Bit.ly for easy sharing. WooCommerce Protection & Sales – Protect WooCommerce pages, products, and checkout with a password. – Sell access to protected content—generate and email passwords automatically after purchase. Detailed Password Usage Statistics – Track when and how often passwords are used. – View first usage date, IP (optional), and browser details. Quick Comparison (Free vs. Pro) Free Version: ✔ Protect sections of pages using shortcodes or blocks. ✔ Secure entire pages and posts. ✔ Automatically protect child pages with a single click. ✔ Lock down your entire site with a password. ✔ Unlock protected content without refreshing the page. ✔ Customize the design, labels, and descriptions of the password form. ✔ Use cookies to grant access across multiple protected areas. Pro Version: ✔ Everything in the free version, plus: ✔ Protect content with multiple passwords or password lists. ✔ Quickly set up password protection via Quick Edit or Bulk Edit. ✔ Protect content using Google reCAPTCHA or hCAPTCHA. ✔ Unlock protected content by user role or email. ✔ Set passwords to expire based on usage limits or time intervals. ✔ Generate encrypted unlock links for seamless access. ✔ Track and prevent concurrent password sharing. ✔ Secure WooCommerce products and store pages. ✔ Sell access to protected content via WooCommerce integration. ✔ Detailed statistics on password usage and lists. Get it now on passster.com/ Documentation Learn more about this plugin in our official documentation Support Free users: Ask in our forum Pro users: Get priority help
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C