Passster – Password Protect Pages and Content

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 58% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Modeled within the band wp.org reports; tightens as we track daily.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. The recent download trend is too spiky to read.

1. ★★★★★ jpluttme

   5mo ago

   Unfortunately had too many problems. It worked at first, but would just stop working when doing password lists. Tried using a single password for protected areas, which worked until the plugin was updated, and then stopped. A support ticket submitted via the website wasn’t answered promptly, so I had to switch to another plugin that worked reliably. The number of issues I had with the paid version just made me look bad to my clients, who were never pleased when the plugin stopped working.

   Read on wp.org ↗
2. ★★★★★ Diiamo

   5mo ago

   Great plugin, great support

   Read on wp.org ↗
3. ★★★★★ Host Domination

   1.5y ago

   It doesn’t always work every now and then due to a “Security Check Failed” error for no reason

   Read on wp.org ↗
4. ★★★★★ FZietsman

   1.8y ago

   This plugin worked fine, but suddenly I get the error “Sorry there was an error” message on all content. I even changed the password, same error. Re-Installed the pluginm, Tried different browsers and private window, nothing works. So far the plugin works as described, the only issue I have at this stage is that if you have a password protected section at the bottom of a page and you enter the password to display the content, it basically refreshed the whole page and jumps right to the top of the page again, meaning you will need to scroll all the way down to the content again. This topic was modified 6 months, 2 weeks ago by FZietsman. Reason: Something went wrong

   Read on wp.org ↗
5. ★★★★★ Andreas

   1.9y ago

   Works sporadic, not realy to use.

   Read on wp.org ↗
6. ★★★★★ getbolt

   2.0y ago

   Activated global protection, styled the form and created a page with elementor but the form does not even show on the page.

   Read on wp.org ↗
7. ★★★★★ Lazeh

   2.2y ago

   I quite like the plugin but the support was poor. 3 days and I’m still waiting for a response from Patrick.

   Read on wp.org ↗
8. ★★★★★ intelligentDesign

   2.6y ago

   I’m not sure that updating the plugin is the only cause, but it is a cause of this problem: the correct password ceases to unlock the content after an update and says “security check failed” or something when attempting to authenticate. This causes a periodic freak-out of my customer. To fix it I have to add and take away the whole-page lock…I think… It’s hard to pinpoint what I actually do that makes it start working again.

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 4.3.6 Added: “Show Password” label is now customizable from the General settings tab. Fixed: Per-page form text being used even when “Overwrite Defaults” is disabled. Fixed: Instruction text showing as garbled characters when 4.3.6
2. — Version 4.3.5 Fixed: hCaptcha cookie not being recognized on subsequent page loads. Fixed: Unlock links with special characters in instructions could cause encoding errors. Fixed: Pass parameter being lost during global protection red 4.3.5
3. — Version 4.3.4 Fixed: Replaced non-functional license activation button on free version with installation guide for Passster PRO. Fixed: Category lock not showing password form on regular post category archive pages. 4.3.4
4. — Version 4.3.3 Changed: Enhance PS_Rest_Handler to allow public access to additional Passster endpoints for guest users. 4.3.3
5. — Version 4.3.2 Fixed: Category lock for WooCommerce products and categories. Changed: Page refresh on unlock is now on by default. Inline unlock can be enabled via Advanced → Unlock Behaviour. 4.3.2
6. — Version 4.3.1 Fixed: Password label should not be visible, it’s there for accessibility reasons. Fixed: Password label is now translatable. Fixed: Missing loading animation. 4.3.1

17 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. Medium · 5.3 Passster – Password Protect Pages and Content < 4.3.9 - Missing Authorization ↗
   2026-08-24 CVE-2026-17559 Missing Authorization Affects < 4.3.9 Patched in 4.3.9
2. Medium · 5.3 Passster – Password Protect Pages and Content < 4.3.6 - Missing Authorization ↗
   2026-08-05 CVE-2026-16604 Missing Authorization Affects < 4.3.6 Patched in 4.3.6
3. Medium · 4.3 Content Protector (Passster) <= 4.3.6 - Authenticated (Contributor+) Sensitive Information Exposure ↗
   2026-08-03 CVE-2025-15674 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 4.3.6 Patched in 4.3.7
4. Medium · 5.3 Content Protector (Passster) <= 4.3.5 - Unauthenticated Non-Public Post Content Disclosure ↗
   2026-07-27 CVE-2026-16602 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 4.3.5 Patched in 4.3.6
5. Medium · 5.3 Content Protector (Passster) <= 4.3.5 - Unauthenticated Category-Locked Content Disclosure ↗
   2026-07-27 CVE-2026-16603 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 4.3.5 Patched in 4.3.6
6. Medium · 4.3 Passster <= 4.2.25 - Missing Authorization ↗
   2026-02-12 CVE-2026-25036 Missing Authorization Affects <= 4.2.25 Patched in 4.2.26
7. Medium · 6.4 Passster – Password Protect Pages and Content <= 4.2.24 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode ↗
   2026-01-27 CVE-2025-14865 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 4.2.24 Patched in 4.2.25
8. Medium · 5.3 Passster <= 4.2.19 - Unauthenticated Information Exposure ↗
   2025-11-12 CVE-2025-64218 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 4.2.19 Patched in 4.2.20
9. Medium · 6.4 Passster <= 4.2.18 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
   2025-09-22 CVE-2025-57926 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 4.2.18 Patched in 4.2.19
10. Medium · 5.3 Passster – Password Protect Pages and Content <= 4.2.10 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure ↗
    2025-01-06 CVE-2024-11282 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 4.2.10 Patched in 4.2.11
11. Medium · 6.4 Passster <= 4.2.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via content_protector Shortcode ↗
    2024-04-04 CVE-2024-2026 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 4.2.6.4 Patched in 4.2.6.5
12. Medium · 5.3 Passster – Password Protect Pages and Content <= 4.2.6.2 - Missing Authorization to Sensitive Information Exposure ↗
    2024-02-08 CVE-2024-0616 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 4.2.6.2 Patched in 4.2.6.3
13. Medium · 6.1 Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get ↗
    2023-07-18 CVE-2023-33999 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 4.2.1 Patched in 4.2.2
14. Medium · 6.4 Passster – Password Protection <= 3.5.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode ↗
    2022-12-29 CVE-2021-24837 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.5.5.7 Patched in 3.5.5.8
15. Medium · 5.3 Passster <= 3.5.5.8 - Missing Authentication leading to Sensitive Information Disclosure (Private Post Leakage) ↗
    2022-12-29 CVE-2021-24881 Missing Authorization Affects <= 3.5.5.8 Patched in 3.5.5.9
16. Medium · 5.3 Passster <= 3.5.5.5.1 - Insecure Password Storage to Sensitive Data Exposure ↗
    2022-09-21 CVE-2022-3206 Inadequate Encryption Strength Affects <= 3.5.5.5.1 Patched in 3.5.5.5.2
17. Medium · 6.3 Freemius SDK <= 2.4.2 - Missing Authorization Checks ↗
    2022-03-04 CVE-2022-4974 Missing Authorization Affects < 3.5.5.2 Patched in 3.5.5.2

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0

Translated into 38 languages, 2 at 90% or more

Plus 14 more locales with partial translations.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

No tier crossings observed yet.

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• PPWP – Password Protect Pages 30K+ installs · 4.6★ · 5 shared tags A
• Password Protected — Lock Entire Site, Pages, Posts, Categories, and Partial Content 300K+ installs · 4.4★ · 3 shared tags A
• ContentProtector – password protect your page, post or text 4K+ installs · 3.6★ · 3 shared tags C
• Password for WP 200+ installs · 3.6★ · 3 shared tags B
• Very Simple Password for WordPress 200+ installs · 4.2★ · 3 shared tags D
• Nucuta Password Protect 10+ installs · 4.0★ · 3 shared tags D

Embed this report card

Drop a live Pulse card for Passster – Password Protect Pages and Content into a readme, a review or a deck. It updates itself.

Passster – Password Protect Pages and Content: 10K+ active installs, 4.2★ (60 reviews). Plugin Pulse (WP Mayor), as of 2026-08-29. https://plugins.wpmayor.com/plugin/content-protector