Description
WordPress Plugin Passster-Password Protection stores the password inside a cookie named "passster" using base64 encoding method which is easy to decode, if leaked. WordPress Plugin Passster-Password Protection version 3.5.5.5.1 is affected; prior versions may also be affected.
Remediation
Update to plugin version 3.5.5.5.2 or latest
References
https://wpscan.com/vulnerability/a8963750-62bf-403e-a906-94f371ed2a7a
https://plugins.svn.wordpress.org/content-protector/trunk/readme.txt
Related Vulnerabilities
WordPress Plugin Secure HTML5 Video Player Cross-Site Scripting (3.3)
Apache HTTP Server Other Vulnerability (CVE-2004-0492)
WordPress Plugin SiteGround Security Security Bypass (1.2.5)
WordPress Plugin Tutor LMS-eLearning and online course solution Cross-Site Scripting (1.9.14)
WordPress Plugin Contact Form Manager Multiple Vulnerabilities (1.4.4)