DEV Institute

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

DEV Institute records in CISA KEV

No DEV Institute vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Restrict User Access 2 records LOW

Records

2 records in Restrict User Access · all components

TI-2024-19311 CVE-2024-29138 · GHSA-qm75-22fr-fxmp

WordPress Restrict User Access plugin <= 2.5 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 32

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Joachim Jensen Restrict User Access – Membership Plugin with Force restrict-user-access.This issue affects Restrict Us…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00617 Published 2024-03-19 No fix listed CWE-79

TI-2024-00633 CVE-2024-0687 · GHSA-528q-7xpc-4jcv

Restrict User Access – Ultimate Membership & Content Protection <= 2.5 - Information Exposure

LOW 25

The Restrict User Access – Ultimate Membership & Content Protection plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.5 via API.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00546 Published 2024-03-13 No fix listed CWE-284

Open these records in search →

Critical	0
High	1
Medium	2
Low	0
No CVSS	0