Vulnerabilities

TI-2025-36007 CVE-2025-58202 · GHSA-224c-5v2c-j3fr

WordPress Simple Page Access Restriction Plugin <= 1.0.32 - Cross Site Request Forgery (CSRF) Vulnerability

LOW 19

Cross-Site Request Forgery (CSRF) vulnerability in Plugins and Snippets Simple Page Access Restriction simple-page-access-restriction allows Cross Site Request Forgery.This issue affects Simple Page Access Restriction: f…

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00128 Published 2025-08-27 No fix listed CWE-352

TI-2025-04611 CVE-2025-5142 · GHSA-6f5m-fg33-2rmv

Simple Page Access Restriction <= 1.0.31 - Cross-Site Request Forgery via Multiple Parameters

LOW 28

The Simple Page Access Restriction plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.31.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.0023 Published 2025-05-30 No fix listed CWE-352

TI-2024-10464 CVE-2024-11295 · GHSA-qmx7-pc8j-qj3r

Simple Page Access Restriction <= 1.0.29 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure

LOW 31

The Simple Page Access Restriction plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0.29 via the WordPress core search feature.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00473 Published 2024-12-18 No fix listed CWE-200

TI-2024-00890 CVE-2024-0965 · GHSA-mmgp-f467-5jfj

Simple Page Access Restriction <= 1.0.21 - Improper Access Control to Sensitive Information Exposure via REST API

LOW 31

The Simple Page Access Restriction plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0.21 via the REST API.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00482 Published 2024-02-08 No fix listed CWE-284

Vulnerabilities

Filters

WordPress Simple Page Access Restriction Plugin <= 1.0.32 - Cross Site Request Forgery (CSRF) Vulnerability

Simple Page Access Restriction <= 1.0.31 - Cross-Site Request Forgery via Multiple Parameters

Simple Page Access Restriction <= 1.0.29 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure

Simple Page Access Restriction <= 1.0.21 - Improper Access Control to Sensitive Information Exposure via REST API