← Database

CVE-2022-3206

MEDIUM CVSS: 5.9 Published: 2022-10-17 Modified: 2026-06-17

Description

The Passster WordPress plugin before 3.5.5.5.2 stores the password inside a cookie named "passster" using base64 encoding method which is easy to decode. This puts the password at risk in case the cookies get leaked.

Affected Platforms

Passster Project Passster

Weakness Type

CWE-319, CWE-522

References