CVE-2025-15490

The Passster WordPress plugin prior to version 4.2.26 is vulnerable due to insufficient global protection checks, enabling unauthenticated users to bypass security measures through specially crafted URLs. This flaw could lead to unauthorized access and potential exposure of sensitive information. WordPress site administrators using this plugin should prioritize updating to the latest version to mitigate the risk.