RestrictMate – Restrict Page, Post and any Content ( Content Restriction and Membership Plugin) < 1.3.0 - Unauthenticated Privilege Escalation
highThe RestrictMate – Restrict Page, Post and any Content ( Content Restriction and Membership Plugin) plugin for WordPress is vulnerable to Privilege Escalation in all versions up to 1.3.0. This is due to insufficient restriction on the capabilities a user may grant themselves. This makes it possible for unauthenticated...
- CVSS:
- 7.3 (Wordfence)
- Affected:
- up to 1.3.0
- Fixed in:
- 1.3.0
- Disclosed:
- Aug 27, 2026