TI-2023-22254 CVE-2023-41861 · GHSA-wh4w-qfv2-c5cp
WordPress Restrict Plugin <= 2.2.4 is vulnerable to Cross Site Scripting (XSS)
Priority LOW 31
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Restrict plugin <= 2.2.4 versions.
Restrict
Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Restrict records in CISA KEVNo Restrict vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
2 records
TI-2024-00839 CVE-2024-0910 · GHSA-48hw-jvvh-pj8q
Restrict for Elementor <= 1.0.7 - Protection Mechanism Bypass
Priority LOW 30
The Restrict for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0.7 due to improper restrictions on hidden data that make it accessible through the…