Vulnerabilities

TI-2024-19311 CVE-2024-29138 · GHSA-qm75-22fr-fxmp

WordPress Restrict User Access plugin <= 2.5 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 32

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Joachim Jensen Restrict User Access – Membership Plugin with Force restrict-user-access.This issue affects Restrict Us…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00617 Published 2024-03-19 No fix listed CWE-79

TI-2024-00633 CVE-2024-0687 · GHSA-528q-7xpc-4jcv

Restrict User Access – Ultimate Membership & Content Protection <= 2.5 - Information Exposure

LOW 25

The Restrict User Access – Ultimate Membership & Content Protection plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.5 via API.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00546 Published 2024-03-13 No fix listed CWE-284

Vulnerabilities

Filters

WordPress Restrict User Access plugin <= 2.5 - Reflected Cross Site Scripting (XSS) vulnerability

Restrict User Access – Ultimate Membership & Content Protection <= 2.5 - Information Exposure