Medium severity5.3NVD Advisory· Published Mar 13, 2024· Updated Apr 8, 2026

CVE-2024-1083

Description

The Simple Restrict plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.2.6 via the REST API. This makes it possible for authenticated attackers to bypass the plugin's restrictions to extract post titles and content

Affected products

Wpchill/Simple Restrict
cpe:2.3:a:wpchill:simple_restrict:*:*:*:*:*:wordpress:*:*
Range: <1.2.7
WordPress/Simple Restrictllm-fuzzy
Range: <=1.2.6
Package: https://wordpress.org/plugins/simple-restrict

Patches

Vulnerability mechanics

References

plugins.trac.wordpress.org/changesetnvdPatch
www.wordfence.com/threat-intel/vulnerabilities/id/65963ce0-6589-4753-837c-14ef37a1a9e3nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000