WordPress security by component
Page Restrict
Plugin description
Page Restrict is a WordPress component with 2 published CVE records in this archive. The latest tracked vulnerability was published Feb 28, 2024; the highest CVE/CNA score is 5.3.
Plugin slug:
pagerestrictLatest vulnerability
CVE-2024-24702: Page Restrict: Cross-site request forgery
Page Restrict is affected by cross-site request forgery. Exposure depends on how the affected operation is made reachable by the site. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.
| Safe version |
|
||
|---|---|---|---|
| Feb 28, 2024 |
CVE-2024-24702
Page Restrict: Cross-site request forgery
Page Restrict is affected by cross-site request forgery. Exposure depends on how the affected operation is made reachable by the site. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.
|
See mitigation notes |
CVE4.3
NVD8.8
|
| Feb 28, 2024 |
CVE-2024-0682
Page Restrict: Sensitive information exposure
Page Restrict is affected by sensitive information exposure. The vulnerable path is reachable without authentication. Successful exploitation can disclose data that should not be available to the caller.
|
See mitigation notes |
CVE5.3
NVDPending
|