CVE-2024-11282

CVE-2024-11282 is a sensitive information exposure vulnerability affecting all versions of the Passster – Password Protect Pages and Content WordPress plugin up to 4.2.10. Unauthenticated attackers can exploit this flaw through the WordPress core search feature to extract restricted content, even if it's intended for higher-level roles like administrators. With a CVSS score of 7.5 (High), this vulnerability is easily exploitable over the network with low complexity, potentially leading to significant data compromise. While there is currently no evidence of active exploitation, nor publicly available exploit code, and minimal community discussion, organizations using the affected plugin should prioritize patching.