Skip to content
Sign in
5.3 Medium

CVE-2024-11351 The Restrict – membership, site, content and user access restrictions for WordPress plugin for WordPress is vulnerable…

Description

The Restrict – membership, site, content and user access restrictions for WordPress plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.2.8 via the WordPress core search feature. This makes it possible for unauthenticated attackers to extract sensitive data from posts that have been restricted to higher-level roles such as administrator.

Affected products and versions

Product Affected versions Fixed in
Restrict – membership, site, content and user access restrictions for WordPress 2.2 earliest → 2.2.8 No fix stated

Other CVEs of Restrict – membership, site, content and user access restrictions for WordPress

The 3 CVEs of Restrict – membership, site, content and user access restrictions for WordPress →
CVE-2024-13362 Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in… 6.1 Medium CVE-2022-4974 The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request… 6.3 Medium
Track this CVE