Aller au contenu
Se connecter
5.3 Moyenne

CVE-2024-11351 The Restrict – membership, site, content and user access restrictions for WordPress plugin for WordPress is vulnerable…

Description

The Restrict – membership, site, content and user access restrictions for WordPress plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.2.8 via the WordPress core search feature. This makes it possible for unauthenticated attackers to extract sensitive data from posts that have been restricted to higher-level roles such as administrator.

Produits et versions touchés

Produit Versions touchées Corrigé en
Restrict – membership, site, content and user access restrictions for WordPress 2.2 premières → 2.2.8 Pas de correctif indiqué

Autres CVE de Restrict – membership, site, content and user access restrictions for WordPress

Les 3 CVE de Restrict – membership, site, content and user access restrictions for WordPress →
CVE-2024-13362 Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in… 6.1 Moyenne CVE-2022-4974 The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request… 6.3 Moyenne
Suivre cette CVE