Anonymous Restricted Content <= 1.6.5 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
medium
The Anonymous Restricted Content plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.6.5 via the WordPress core search feature. This makes it possible for unauthenticated attackers to extract sensitive data from posts that have been restricted to logged-in users.
- CVSS:
- 5.3
- Affected:
- up to 1.6.5
- Fixed in:
- 1.6.6
- Disclosed:
- Nov 20, 2024
CVE-2024-11089 on NVD →
Anonymous Restricted Content <= 1.6.2 - Protection Mechanism Bypass
medium
The Anonymous Restricted Content plugin for WordPress is vulnerable to information disclosure in all versions up to, and including, 1.6.2. This is due to insufficient restrictions through the REST API on the posts/pages that protections are being place on. This makes it possible for unauthenticated attackers to access...
- CVSS:
- 5.3
- Affected:
- up to 1.6.2
- Fixed in:
- 1.6.3
- Disclosed:
- Feb 2, 2024
CVE-2024-0909 on NVD →
Protect your WordPress site
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free
← Back to the vulnerability database