Passster – Password Protect Pages and Content

78 Quality Score

Active Installs

18/30

At around 10,000 active installs, this is a mid-tier plugin with a niche but engaged user base, well behind the 300,000+ install leaders in this space.

Update Freshness

25/25

Last updated June 2026 and tested with WordPress 7.0 on PHP 7.2+, the maintenance signals are excellent and show an actively maintained codebase.

User Rating

13/15

An 84 out of 100 from 59 ratings indicates generally positive user sentiment, though the sample size is small enough that one wave of complaints could shift the picture.

Support Health

8/15

With only 1 resolved support thread out of 1 total, there is essentially no track record to judge responsiveness from, which tempers the otherwise strong signals.

WP Compatibility

15/15

Compatibility is perfect on paper: tested with WordPress 7.0, requires 6.5+, and PHP 7.2+, aligning with current and upcoming WordPress environments.

Scores higher than 64% of indexed plugins

About

Password Protect Pages, Posts & Content in WordPress

Active Installs 10k+

Rating ★★★★ 4.2/5

Last Updated 2026-09-18 11:57am GMT

Requires WordPress 6.5+

Tested Up To 7.1.1

Requires PHP 7.2+

Security History

20 known vulnerabilities, all patched

20 Medium

Most recent: September 11, 2026

View details ▸

Passster – Password Protect Pages and Content <= 4.3.13 - Missing Authorization Medium

September 11, 2026 Patched in ["4.3.14"] CVE-2026-62114

Passster – Password Protect Pages and Content < 4.3.9 - Missing Authorization Medium

August 24, 2026 Patched in ["4.3.9"] CVE-2026-17559

Passster – Password Protect Pages and Content < 4.3.6 - Missing Authorization Medium

August 5, 2026 Patched in ["4.3.6"] CVE-2026-16604

Content Protector (Passster) <= 4.3.6 - Authenticated (Contributor+) Sensitive Information Exposure Medium

August 3, 2026 Patched in ["4.3.7"] CVE-2025-15674

Content Protector (Passster) <= 4.3.5 - Unauthenticated Non-Public Post Content Disclosure Medium

July 27, 2026 Patched in ["4.3.6"] CVE-2026-16602

Content Protector (Passster) <= 4.3.5 - Unauthenticated Category-Locked Content Disclosure Medium

July 27, 2026 Patched in ["4.3.6"] CVE-2026-16603

Passster <= 4.2.25 - Unauthenticated Global Content Protection Bypass Medium

February 17, 2026 Patched in ["4.2.26"] CVE-2025-15490

Passster <= 4.2.23 - Unauthenticated Protected Content Disclosure Medium

February 17, 2026 Patched in ["4.2.24"] CVE-2025-15489

Passster <= 4.2.25 - Missing Authorization Medium

February 12, 2026 Patched in ["4.2.26"] CVE-2026-25036

Passster – Password Protect Pages and Content <= 4.2.24 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Medium

January 27, 2026 Patched in ["4.2.25"] CVE-2025-14865

Passster <= 4.2.19 - Unauthenticated Information Exposure Medium

November 12, 2025 Patched in ["4.2.20"] CVE-2025-64218

Passster <= 4.2.18 - Authenticated (Contributor+) Stored Cross-Site Scripting Medium

September 22, 2025 Patched in ["4.2.19"] CVE-2025-57926

Passster – Password Protect Pages and Content <= 4.2.10 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure Medium

January 6, 2025 Patched in ["4.2.11"] CVE-2024-11282

Passster <= 4.2.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via content_protector Shortcode Medium

April 4, 2024 Patched in ["4.2.6.5"] CVE-2024-2026

Passster – Password Protect Pages and Content <= 4.2.6.2 - Missing Authorization to Sensitive Information Exposure Medium

February 8, 2024 Patched in ["4.2.6.3"] CVE-2024-0616

Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get Medium

July 18, 2023 Patched in ["4.2.2"] CVE-2023-33999

Passster – Password Protection <= 3.5.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Medium

December 29, 2022 Patched in ["3.5.5.8"] CVE-2021-24837

Passster <= 3.5.5.8 - Missing Authentication leading to Sensitive Information Disclosure (Private Post Leakage) Medium

December 29, 2022 Patched in ["3.5.5.9"] CVE-2021-24881

Passster <= 3.5.5.5.1 - Insecure Password Storage to Sensitive Data Exposure Medium

September 21, 2022 Patched in ["3.5.5.5.2"] CVE-2022-3206

Freemius SDK <= 2.4.2 - Missing Authorization Checks Medium

March 4, 2022 Patched in ["3.5.5.2"] CVE-2022-4974

What It Does

Passster lets you lock down individual WordPress pages, posts, or content sections with a password. Site owners can protect full pages, partial content blocks, or create sitewide password gates without touching code. It is aimed at quick, front-end content gating rather than full membership management.

Who It's For

This is a good fit for freelancers, coaches, or small businesses that need to share draft work, client resources, or exclusive downloads behind a single password. It also works for course creators running pre-launch or beta pages where full membership software would be overkill.

Who Should Skip It

If you need per-user accounts, drip content, payment processing, or detailed access logs, you should skip this and look at a dedicated membership plugin. Anyone running a large content library or compliance-sensitive site will outgrow a simple password gate quickly.

The Bottom Line

Passster is a focused, well-maintained tool that does one job, gating content with a password, and does it cleanly. The small install base and tiny support footprint mean you are trusting a smaller project, but the recent update history and clean compatibility profile reduce that risk. Worth installing for simple password protection; replace it once your access needs outgrow a single shared password.

Related Plugins

Password Protected 85/100

Pick this if you want to lock your entire site behind one password rather than gating individual pages or content blocks.

Download Monitor 90/100

Choose this when your main goal is protecting file downloads rather than gating readable page content.

Kadence Security 86/100

Go with Kadence when you need password protection bundled with two-factor authentication and brute-force defence in one package.

Protect Uploads 82/100

Pick this if your concern is specifically stopping direct access to media in the uploads folder rather than gating pages.

Visibility Logic for Elementor 82/100

Choose this when you build with Elementor and need conditional visibility rules beyond a simple password field.