Approved changes feed: RSS · Atom

cpe:2.3:a:theandystratton:page_restrict:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorTheandystratton (fff06975-8990-5f12-8b0c-b22057c00e0c)
ProductPage Restrict (6c0c8a3c-88a0-5f85-b0cf-98d210875e7e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-0682 vulnerable 2026-06-08 06:22:01.756823 Page Restrict <= 2.5.5 - Protection Mechanism Bypass
MEDIUM (5.3)
The Page Restrict plugin for WordPress is vulnerable to information disclosure in all versions up to, and including, 2.5.5. This is due to the plugin not properly restricting access to posts via the REST API when a page has been made private. This makes it possible for unauthenticated attackers to view protected posts.
Published: 2024-02-28T08:33:08.123Z
Updated: 2026-04-08T16:57:27.383Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.