Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2024-0682 2 Sivel, Theandystratton 2 Page Restrict, Page Restrict 2026-09-01 5.3 Medium
The Page Restrict plugin for WordPress is vulnerable to information disclosure in all versions up to, and including, 2.5.5. This is due to the plugin not properly restricting access to posts via the REST API when a page has been made private. This makes it possible for unauthenticated attackers to view protected posts.
CVE-2024-24702 1 Sivel 1 Page Restrict 2026-09-01 4.3 Medium
Cross-Site Request Forgery (CSRF) vulnerability in Matt Martz & Andy Stratton Page Restrict.This issue affects Page Restrict: from n/a through 2.5.5.