CVEvulnerability
CVE-2024-0682
5.3 MEDIUM
Official page ↗
- Status
- Analyzed
- Published
- 2024-02-28
- Last modified
- 2026-09-01
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- Weaknesses
- CWE-693
Description
The Page Restrict plugin for WordPress is vulnerable to information disclosure in all versions up to, and including, 2.5.5. This is due to the plugin not properly restricting access to posts via the REST API when a page has been made private. This makes it possible for unauthenticated attackers to view protected posts.
Affected configurations
• sivel page restrict (<= 2.5.5)
Related
Weakness · CWE (1)
- CWE-693 Protection Mechanism Failure weakness
References
- https://wordpress.org/plugins/pagerestrict/ Product
- https://www.wordfence.com/threat-intel/vulnerabilities/id/63f98fd6-eee8-4281-98ea-a267d0442c85?source=cve Third Party Advisory
- https://wordpress.org/plugins/pagerestrict/ Product
- https://www.wordfence.com/threat-intel/vulnerabilities/id/63f98fd6-eee8-4281-98ea-a267d0442c85?source=cve Third Party Advisory