CVE-2026-54852

The miniOrange Page Restriction WordPress (WP) plugin, specifically versions up to and including 1.6.1 , is vulnerable to a Missing Authorization (Broken Access Control) flaw. The vulnerability arises from incorrectly configured access control security levels , which could allow unauthorized acti...

WordPress Page and Post Restriction authorization issue vulnerability

WordPress Page and Post Restriction versions 1.6.0 and earlier contain an authorization issue vulnerability. This vulnerability stems from a lack of proper authorization checks, which may allow attackers to exploit improperly configured access control levels...

CVE-2026-12000: Missing Authorization

The Page and Post Restriction plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to and including 1.4.0 via the WordPress core REST endpoints /wp-json/wp/v2/pages, /wp-json/wp/v2/pages/ , /wp-json/wp/v2/posts, and /wp-json/wp/v2/posts/ . This is due to the plugin'...

PT-2026-68014

Name of the Vulnerable Software and Affected Versions Page and Post Restriction versions prior to 1.4.1 Description Sensitive information exposure occurs via the WordPress core REST endpoints '/wp-json/wp/v2/pages', '/wp-json/wp/v2/pages/', '/wp-json/wp/v2/posts', and '/wp-json/wp/v2/posts/'. The...