CVE-2024-0687

CVE-2024-0687 concerns the WordPress plugin Restrict User Access – Ultimate Membership & Content Protection. Public records in connected documents indicate information exposure via API in all versions up to 2.5, allowing unauthenticated attackers to read the contents of posts and pages through AP...

CVE-2024-29138

The Restrict User Access – Membership Plugin with Force (developed by DEV Institute) is vulnerable to Reflected Cross-Site Scripting (XSS) in versions up to and including 2.5 . The root cause is the improper neutralization of input during web page generation, specifically via the _rua_section par...