Lucene search
PRIOn knowledge basePRION:CVE-2024-0682HistoryFeb 28, 2024 - 9:15 a.m.
Information disclosure
2024-02-2809:15:00
PRIOn knowledge base
www.prio-n.com
6
wordpress
page restrict
plugin
information disclosure
vulnerability
rest api
unauthenticated attackers
The Page Restrict plugin for WordPress is vulnerable to information disclosure in all versions up to, and including, 2.5.5. This is due to the plugin not properly restricting access to posts via the REST API when a page has been made private. This makes it possible for unauthenticated attackers to view protected posts.
Related
cvelist
cvelist
CVE-2024-0682
2024-02-28 08:33:08
nvd
nvd
CVE-2024-0682
2024-02-28 09:15:41
wpvulndb
wpvulndb
Page Restrict <= 2.5.5 - Unauthenticated Protected Post Access
2024-02-28 00:00:00
cve
cve
CVE-2024-0682
2024-02-28 09:15:41
wordfence
wordfence