Medium severity5.3NVD Advisory· Published Feb 3, 2024· Updated Apr 8, 2026
CVE-2024-0909
CVE-2024-0909
Description
The Anonymous Restricted Content plugin for WordPress is vulnerable to information disclosure in all versions up to, and including, 1.6.2. This is due to insufficient restrictions through the REST API on the posts/pages that protections are being place on. This makes it possible for unauthenticated attackers to access protected content.
Affected products
1- cpe:2.3:a:cayenne:anonymous_restricted_content:*:*:*:*:*:wordpress:*:*Range: <=1.6.2
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3News mentions
0No linked articles in our index yet.