Lucene search
+L

10 matches found

NVD
NVD
•added 2026/10/09 12:17 p.m.•12 views

CVE-2026-62040

Missing Authorization vulnerability in DEV Institute Restrict User Access – Membership Plugin with Force restrict-user-access allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Restrict User Access – Membership Plugin with Force: from n/a through 2.8.1...

5.3CVSS0.00187EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/09 11:42 a.m.•18 views

CVE-2026-62040

The Restrict User Access – Membership Plugin with Force (WordPress plugin) is vulnerable to a Broken Access Control issue in versions up to and including 2.8.1 . The root cause is a Missing Authorization flaw that allows for the exploitation of incorrectly configured access control security level...

5.3CVSS5.9AI score0.00187EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/09 11:42 a.m.•47 views

CVE-2026-62040 WordPress Restrict User Access – Membership Plugin with Force plugin <= 2.8.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in DEV Institute Restrict User Access – Membership Plugin with Force restrict-user-access allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Restrict User Access – Membership Plugin with Force: from n/a through 2.8.1...

5.3CVSS0.00187EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/09 11:42 a.m.•11 views

EUVD-2026-95729

Missing Authorization vulnerability in DEV Institute Restrict User Access – Membership Plugin with Force restrict-user-access allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Restrict User Access – Membership Plugin with Force: from n/a through 2.8.1...

5.3CVSS5.9AI score0.00187EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/10/09 11:42 a.m.•11 views

CVE-2026-62040 WordPress Restrict User Access – Membership Plugin with Force plugin <= 2.8.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in DEV Institute Restrict User Access – Membership Plugin with Force restrict-user-access allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Restrict User Access – Membership Plugin with Force: from n/a through 2.8.1...

5.3CVSS5.9AI score0.00187EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2026/10/09 11:40 a.m.•11 views

WordPress Restrict User Access – Membership Plugin with Force plugin <= 2.8.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Salúa Es-sair in WordPress Plugin Restrict User Access – Membership Plugin with Force versions = 2.8.1...

5.3CVSS5.8AI score0.00187EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
•added 2026/10/09 12:00 a.m.•8 views

PT-2026-108877

Missing Authorization vulnerability in DEV Institute Restrict User Access – Membership Plugin with Force restrict-user-access allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Restrict User Access – Membership Plugin with Force: from n/a through 2.8.1...

5.3CVSS5.9AI score0.00187EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/09 12:00 a.m.•6 views

CVE-2026-62040: Missing Authorization

Missing Authorization vulnerability in DEV Institute Restrict User Access – Membership Plugin with Force restrict-user-access allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Restrict User Access – Membership Plugin with Force: from n/a through 2.8.1...

5.3CVSS5.9AI score0.00187EPSS
SaveExploits0References2
CVE
CVE
•added 2024/03/19 1:40 p.m.•96 views

CVE-2024-29138

The Restrict User Access – Membership Plugin with Force (developed by DEV Institute) is vulnerable to Reflected Cross-Site Scripting (XSS) in versions up to and including 2.5 . The root cause is the improper neutralization of input during web page generation, specifically via the _rua_section par...

7.1CVSS7.2AI score0.00617EPSS
SaveIn wildExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/19 12:00 a.m.•7 views

CVE-2024-29138: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Joachim Jensen Restrict User Access – Membership Plugin with Force restrict-user-access.This issue affects Restrict User Access – Membership Plugin with Force: from n/a through = 2.5...

7.1CVSS5.8AI score0.00617EPSS
SaveExploits0References1
Rows per page
Query Builder