Lucene search

K
wpvulndbWpvulndbWPVDB-ID:9ABB2DD2-3B5C-45A2-9E63-AAE0E1A9FA26
HistoryFeb 02, 2024 - 12:00 a.m.

Anonymous Restricted Content < 1.6.3 - Protection Mechanism Bypass

2024-02-0200:00:00
wpscan.com
9
wordpress
plugin
vulnerability
unauthenticated access
information disclosure
rest api

AI Score

6.5

Confidence

Low

EPSS

0.001

Percentile

32.5%

Description The Anonymous Restricted Content plugin for WordPress is vulnerable to information disclosure in all versions up to, and including, 1.6.2. This is due to insufficient restrictions through the REST API on the posts/pages that protections are being place on. This makes it possible for unauthenticated attackers to access protected content.

AI Score

6.5

Confidence

Low

EPSS

0.001

Percentile

32.5%

Related for WPVDB-ID:9ABB2DD2-3B5C-45A2-9E63-AAE0E1A9FA26