WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
restrict-content
Published
2025-01-25
Title
Membership Plugin – Restrict Content < 3.2.14 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
Slug
restrict-content
Published
2025-12-22
Title
Membership Plugin – Restrict Content < 3.2.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodes
Slug
restrict-elementor-widgets
Published
2025-12-13
Title
Restrict Elementor Widgets, Columns and Sections <= 1.12 - Missing Authorization
Slug
restrict-file-access
Published
2025-06-13
Title
Restrict File Access <= 1.1.2 - Authenticated (Subscriber+) Arbitrary File Read
Slug
restrict-file-access
Published
2025-07-14
Title
Restrict File Access <= 1.1.2 - Cross-Site Request Forgery to Arbitrary File Deletion
Slug
restrict-for-elementor
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
restrict-for-elementor
Published
2024-06-05
Title
Restrict for Elementor < 1.0.8 - Protection Mechanism Bypass
Slug
restrict-taxonomies
Published
2025-02-21
Title
Restrict Taxonomies <= 1.3.3 - Reflected Cross-Site Scripting
Slug
restrict-user-access
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
restrict-user-access
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
restrict-user-access
Published
2024-02-26
Title
Restrict User Access – Ultimate Membership & Content Protection < 2.6 - Information Exposure
Slug
restrict-user-access
Published
2024-03-18
Title
Restrict User Access – Membership Plugin with Force < 2.6 - Reflected Cross-Site Scripting
Slug
restrict-user-registration
Published
2025-04-10
Title
Restrict User Registration <= 1.0.1 Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
restrict-user-registration
Published
2025-10-02
Title
Restrict User Registration <= 1.0.1 - Cross-Site Request Forgery to Settings Update
Slug
restrict-usernames-emails-characters
Published
2024-01-05
Title
Restrict Usernames Emails Characters Plugin < 3.1.4 - Admin+ Stored XSS
Slug
restricted-content
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
restricted-content
Published
2023-09-26
Title
Restrict < 2.2.5 - Reflected XSS
Slug
restricted-content
Published
2024-12-10
Title
Restrict – membership, site, content and user access restrictions for WordPress < 2.2.9 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
Slug
restricted-site-access
Published
2022-08-31
Title
Restricted Site Access < 7.3.2 - Access Bypass via IP Spoofing
Slug
restropress
Published
2021-07-19
Title
RestroPress < 2.8.3 - Cart Manipulation via CSRF
Slug
restropress
Published
2021-07-19
Title
RestroPress < 2.8.3.1 - Unauthorised AJAX Calls
Slug
restropress
Published
2024-04-12
Title
RestroPress < 3.1.2.1 - Cross-Site Request Forgery via rpress_orders_list_table_process_bulk_actions
Slug
restropress
Published
2024-06-06
Title
RestroPress – Online Food Ordering System < 3.1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
restropress
Published
2025-04-01
Title
RestroPress <= 3.2.4.2 - Missing Authorization
Slug
restropress
Published
2025-04-09
Title
RestroPress <= 3.2.4.2 - Reflected Cross-Site Scripting