The Restrict User Access – Ultimate Membership & Content Protection plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.5 via API. This makes it possible for unauthenticated attackers to obtain the contents of posts and pages via API.
CVSS
No CVSS.
References
Configurations
History
11 Mar 2025, 13:32
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:dev.institute:restrict_user_access:*:*:*:*:*:wordpress:*:* | |
| First Time |
Dev.institute
Dev.institute restrict User Access |
|
| CWE | NVD-CWE-noinfo | |
| References | () https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3037773%40restrict-user-access%2Ftrunk&old=3010745%40restrict-user-access%2Ftrunk&sfp_email=&sfph_mail= - Patch | |
| References | () https://www.wordfence.com/threat-intel/vulnerabilities/id/f67684cd-3e0f-48bb-967a-16ea2b027843?source=cve - Third Party Advisory |
13 Mar 2024, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-03-13 16:15
Updated : 2025-03-11 13:32
NVD link : CVE-2024-0687
Mitre link : CVE-2024-0687
JSON object : View
Products Affected
dev.institute
- restrict_user_access
CWE