Restrict Content Vulnerabilities

The Membership Plugin – Kadence Memberships plugin for WordPress (formerly Restrict Content) is vulnerable to password reset link poisoning leading to account takeover in all versions up to, and including, 4.0.0. This is due to the legacy lost-password handler rc_process_lost_password_form() consuming the attacker-cont...

CVSS:

9.3

Affected:

up to 4.0.0

Fixed in:

4.0.1

Disclosed:

Aug 4, 2026

CVE-2026-9273 on NVD →

WordPress Membership Plugin - Restrict Content plugin <= 3.2.24 - Unvalidated Redirect in Password Reset Flow via rcp_redirect vulnerability

CVSS:

4.3

Affected:

up to 3.2.24

Fixed in:

3.2.25

Disclosed:

Mar 20, 2026

The Membership Plugin – Restrict Content plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 3.2.22. This makes it possible for unauthenticated attackers to perform an unauthorized action.

CVSS:

5.3

Affected:

up to 3.2.22

Fixed in:

3.2.23

Disclosed:

Mar 20, 2026

CVE-2026-32546 on NVD →

The Membership Plugin – Restrict Content plugin for WordPress is vulnerable to Unvalidated Redirect in all versions up to, and including, 3.2.24. This is due to insufficient validation on the redirect url supplied via the 'rcp_redirect' parameter. This makes it possible for unauthenticated attackers to redirect users w...

CVSS:

4.3

Affected:

up to 3.2.24

Fixed in:

3.2.25

Disclosed:

Mar 19, 2026

CVE-2026-4136 on NVD →

WordPress Membership plugin - Restrict Content plugin <= 3.2.20 - Unauthenticated Privilege Escalation via 'rcp_level' vulnerability

CVSS:

8.1

Affected:

up to 3.2.20

Fixed in:

3.2.21

Disclosed:

Mar 5, 2026

The Membership Plugin – Restrict Content plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.2.20. This is due to the `rcp_setup_registration_init()` function accepting any membership level ID via the `rcp_level` POST parameter without validating that the level is active o...

CVSS:

8.1

Affected:

up to 3.2.20

Fixed in:

3.2.21

Disclosed:

Mar 4, 2026

CVE-2026-1321 on NVD →

The Membership Plugin – Restrict Content for WordPress is vulnerable to Stored Cross-Site Scripting via multiple invoice settings fields in all versions up to, and including, 3.2.18 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level a...

CVSS:

4.4

Affected:

up to 3.2.18

Fixed in:

3.2.19

Disclosed:

Feb 17, 2026

CVE-2026-1304 on NVD →

[en] The Membership Plugin – Restrict Content plugin for WordPress is vulnerable to Missing Authentication in all versions up to, and including, 3.2.16 via the 'rcp_stripe_create_setup_intent_for_saved_card' function due to missing capability check. Additionally, the plugin does not check a user-controlled key, which m...

Affected:

up to 3.2.17

Fixed in:

3.2.17

Disclosed:

Jan 16, 2026

CVE-2025-14844 on NVD →

The Membership Plugin – Restrict Content plugin for WordPress is vulnerable to Missing Authentication in all versions up to, and including, 3.2.16 via the 'rcp_stripe_create_setup_intent_for_saved_card' function due to missing capability check. Additionally, the plugin does not check a user-controlled key, which makes...

CVSS:

8.2

Affected:

up to 3.2.16

Fixed in:

3.2.17

Disclosed:

Jan 15, 2026

CVE-2025-14844 on NVD →

[en] The Membership Plugin – Restrict Content plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'register_form' and 'restrict' shortcodes in all versions up to, and including, 3.2.15 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it po...

Affected:

up to 3.2.16

Fixed in:

3.2.16

Disclosed:

Dec 23, 2025

CVE-2025-14000 on NVD →

The Membership Plugin – Restrict Content plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'register_form' and 'restrict' shortcodes in all versions up to, and including, 3.2.15 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possibl...

CVSS:

6.4

Affected:

up to 3.2.15

Fixed in:

3.2.16

Disclosed:

Dec 22, 2025

CVE-2025-14000 on NVD →

[en] The Membership Plugin – Restrict Content plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.2.13 via the WordPress core search feature. This makes it possible for unauthenticated attackers to extract sensitive data from posts that have been restricted to hi...

Affected:

up to 3.2.14

Fixed in:

3.2.14

Disclosed:

Jan 26, 2025

CVE-2024-11090 on NVD →

The Membership Plugin – Restrict Content plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.2.13 via the WordPress core search feature. This makes it possible for unauthenticated attackers to extract sensitive data from posts that have been restricted to higher-...

CVSS:

5.3

Affected:

up to 3.2.13

Fixed in:

3.2.14

Disclosed:

Jan 25, 2025

CVE-2024-11090 on NVD →

[en] Missing Authorization vulnerability in StellarWP Restrict Content.This issue affects Restrict Content: from n/a through 3.2.8.

Affected:

up to 3.2.9

Fixed in:

3.2.9

Disclosed:

Apr 15, 2024

CVE-2024-31432 on NVD →

The Restrict Content plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the update_opt_in_get_status() function in versions up to, and including, 3.2.8. This makes it possible for unauthenticated attackers to update opt in status.

CVSS:

5.3

Affected:

up to 3.2.8

Fixed in:

3.2.9

Disclosed:

Apr 10, 2024

CVE-2024-31432 on NVD →

[en] Exposure of Sensitive Information to an Unauthorized Actor vulnerability in StellarWP Membership Plugin – Restrict Content plugin <= 3.2.7 versions.

Affected:

up to 3.2.8

Fixed in:

3.2.8

Disclosed:

Nov 23, 2023

CVE-2023-47668 on NVD →

The Membership Plugin – Restrict Content plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.2.7 via the legacy log file. This makes it possible for unauthenticated attackers to extract sensitive data including debug information.

CVSS:

5.3

Affected:

up to 3.2.7

Fixed in:

3.2.8

Disclosed:

Nov 6, 2023

CVE-2023-47668 on NVD →

The Membership Plugin – Restrict Content plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.2.7 via the legacy log file. This makes it possible for unauthenticated attackers to extract sensitive data including debug information.

Affected:

up to 3.2.8

Fixed in:

3.2.8

Disclosed:

Nov 6, 2023

[en] The Membership WordPress plugin before 3.2.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin

Affected:

up to 3.2.3

Fixed in:

3.2.3

Disclosed:

Jul 17, 2023

CVE-2023-3182 on NVD →

Update the WordPress Restrict Content plugin to the latest available version (at least 3.2.3). Unknown discovered and reported this Broken Access Control vulnerability in WordPress Restrict Content Plugin. This vulnerability has been fixed in version 3.2.3.

Affected:

up to 3.2.3

Fixed in:

3.2.3

Disclosed:

Jun 26, 2023

Update the WordPress Restrict Content plugin to the latest available version (at least 3.2.3). Unknown discovered and reported this Cross Site Scripting (XSS) vulnerability in WordPress Restrict Content Plugin. This could allow a malicious actor to inject malicious scripts, such as redirects, advertisements, and other...

Affected:

up to 3.2.3

Fixed in:

3.2.3

Disclosed:

Jun 26, 2023

The Restrict Content plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via POST data from the rcp_ajax_dismissed_notice_handler() function in versions up to, and including, 3.2.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

CVSS:

6.1

Affected:

up to 3.2.3

Fixed in:

3.2.3

Disclosed:

Jun 23, 2023

CVE-2023-3182 on NVD →

The Restrict Content plugin for WordPress is vulnerable to unauthorized notice dismissal due to a missing capability check on the rcp_ajax_dismissed_notice_handler() function in versions up to, and including, 3.2.2. This makes it possible for authenticated attackers with subscriber-level access and above to dismiss plu...

CVSS:

5.3

Affected:

up to 3.2.3

Fixed in:

3.2.3

Disclosed:

Jun 23, 2023

The Restrict Content plugin for WordPress is vulnerable to unauthorized notice dismissal due to a missing capability check on the rcp_ajax_dismissed_notice_handler() function in versions up to, and including, 3.2.2. This makes it possible for authenticated attackers with subscriber-level access and above to dismiss plu...

Affected:

up to 3.2.3

Fixed in:

3.2.3

Disclosed:

Jun 23, 2023

The Restrict Content plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via POST data from the rcp_ajax_dismissed_notice_handler() function in versions up to, and including, 3.2.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

Affected:

up to 3.2.3

Fixed in:

3.2.3

Disclosed:

Jun 23, 2023

** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.

Affected:

up to 3.2.5

Fixed in:

3.2.5

CVE-2023-33999 on NVD →