CVE-2022-3206

MEDIUM · CVSS 5.9 EPSS 0.46%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2022-10-17 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2022-3206

Severity

MEDIUM

CVSS

5.9

EPSS

0.46%

WordPress

Original NVD Description

The Passster WordPress plugin before 3.5.5.5.2 stores the password inside a cookie named "passster" using base64 encoding method which is easy to decode. This puts the password at risk in case the cookies get leaked.