Restrict For Elementor Vulnerabilities

[en] The Restrict for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0.6 due to improper restrictions on hidden data that make it accessible through the REST API. This makes it possible for unauthenticated attackers to extract potentially sensitive...

Affected:

up to 1.0.8

Fixed in:

1.0.8

Disclosed:

Jun 6, 2024

CVE-2024-0910 on NVD →

The Restrict for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0.7 due to improper restrictions on hidden data that make it accessible through the REST API. This makes it possible for unauthenticated attackers to extract potentially sensitive data...

CVSS:

5.3

Affected:

up to 1.0.7

Fixed in:

1.0.8

Disclosed:

Jun 5, 2024

CVE-2024-0910 on NVD →

Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability discovered in WordPress Restrict for Elementor plugin (versions < 1.0.3).

Affected:

up to 1.0.3

Fixed in:

1.0.3

Disclosed:

Feb 28, 2022

Sensitive Information Disclosure vulnerability discovered in WordPress Restrict for Elementor plugin (versions < 1.0.3).

Affected:

up to 1.0.3

Fixed in:

1.0.3

Disclosed:

Feb 28, 2022

** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.

Affected:

up to 1.0.6

Fixed in:

1.0.6

CVE-2023-33999 on NVD →