PT-2026-47124

Name of the Vulnerable Software and Affected Versions Page-list plugin for WordPress versions prior to 6.3 Description Missing authorization occurs in the pagelist unqprfx ext shortcode function, specifically within the 'pagelist ext' and 'pagelistext' shortcodes. The function accepts...

PT-2024-16576

Name of the Vulnerable Software and Affected Versions The Simple Restrict plugin for WordPress versions up to, and including, 1.2.6 Description The issue allows authenticated attackers to bypass the plugin's restrictions, extracting post titles and content via the REST API. Recommendations For...

CVE-2024-1462: Improper Access Control

The Maintenance Page plugin for WordPress is vulnerable to Basic Information Exposure in all versions up to, and including, 1.0.8 via the REST API. This makes it possible for unauthenticated attackers to view post titles and content when the site is in maintenance mode...