CVE-2024-0965

Published: Feb 8, 2024Modified: Apr 8, 2026

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploitability: 3.9 / Impact: 1.4

Source: NVD

Description

The Simple Page Access Restriction plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0.21 via the REST API. This makes it possible for unauthenticated attackers to bypass the plugin's page restriction and view page content.

Affected (1)

Products: Pluginsandsnippets: Simple Page Access Restriction

Pluginsandsnippets

1 product

Simple Page Access Restriction

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Pluginsandsnippets Simple Page Access Restriction	Up to 1.0.21

Related CWEs

Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

References (4)

https://plugins.trac.wordpress.org/changeset/3030099/simple-page-access-restriction

Source: security@wordfence.com

Patch

https://www.wordfence.com/threat-intel/vulnerabilities/id/d99dc270-1b28-4e76-9346-38b2b96be01c?source=cve

Source: security@wordfence.com

Third Party Advisory

https://plugins.trac.wordpress.org/changeset/3030099/simple-page-access-restriction

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://www.wordfence.com/threat-intel/vulnerabilities/id/d99dc270-1b28-4e76-9346-38b2b96be01c?source=cve

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.