← Back

Theandystratton

theandystratton

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Pagerestrict
pagerestrict
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2024-0682
1Theandystratton
1Pagerestrict
Apr 8, 2026
Feb 28, 2024
N/A· v4
5.3 MEDIUM· v3
N/A· v2
The Page Restrict plugin for WordPress is vulnerable to information disclosure in all versions up to, and including, 2.5.5. This is due to the plugin not properly restricting access to posts via the REST API when a page...Show more
The Page Restrict plugin for WordPress is vulnerable to information disclosure in all versions up to, and including, 2.5.5. This is due to the plugin not properly restricting access to posts via the REST API when a page has been made private. This makes it possible for unauthenticated attackers to view protected posts.Show less