Medium severity5.3NVD Advisory· Published Feb 28, 2024· Updated Apr 8, 2026
CVE-2024-0682
CVE-2024-0682
Description
The Page Restrict plugin for WordPress is vulnerable to information disclosure in all versions up to, and including, 2.5.5. This is due to the plugin not properly restricting access to posts via the REST API when a page has been made private. This makes it possible for unauthenticated attackers to view protected posts.
Affected products
1- cpe:2.3:a:theandystratton:pagerestrict:*:*:*:*:*:wordpress:*:*Range: <=2.5.5
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- www.wordfence.com/threat-intel/vulnerabilities/id/63f98fd6-eee8-4281-98ea-a267d0442c85nvdThird Party Advisory
- wordpress.org/plugins/pagerestrict/nvdProduct
News mentions
0No linked articles in our index yet.