DEV Institute

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

DEV Institute records in CISA KEV

No DEV Institute vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Restrict User Access 2 records LOW

Records

3 records

TI-2024-19311 CVE-2024-29138 · GHSA-qm75-22fr-fxmp

WordPress Restrict User Access plugin <= 2.5 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 32

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Joachim Jensen Restrict User Access – Membership Plugin with Force restrict-user-access.This issue affects Restrict Us…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00617 Published 2024-03-19 No fix listed CWE-79

TI-2026-69984 CVE-2026-62040 · GHSA-92m4-mg5f-62gp

Missing authorization in Restrict User Access WordPress plugin

LOW 29

Missing Authorization vulnerability in DEV Institute Restrict User Access – Membership Plugin with Force restrict-user-access allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Res…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00187 Published 2026-10-09 No fix listed CWE-862

TI-2024-00633 CVE-2024-0687 · GHSA-528q-7xpc-4jcv

Restrict User Access – Ultimate Membership & Content Protection <= 2.5 - Information Exposure

LOW 25

The Restrict User Access – Ultimate Membership & Content Protection plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.5 via API.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00546 Published 2024-03-13 No fix listed CWE-284

Open these records in search →

Critical	0
High	1
Medium	2
Low	0
No CVSS	0