WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
restore-permanently-delete-post-or-page-data
Published
2025-08-22
Title
Restore Permanently delete Post or Page Data <= 1.0 - Cross-Site Request Forgery
Slug
restrict-anonymous-access
Published
2025-01-24
Title
Restrict Anonymous Access < 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
restrict-categories
Published
2023-11-07
Title
Restrict Categories <= 2.6.4 - Reflected XSS
Slug
restrict-content
Published
2023-06-26
Title
Membership Plugin - Restrict Content < 3.2.3 - Reflected XSS
Slug
restrict-content
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
restrict-content
Published
2023-11-06
Title
Restrict Content < 3.2.8 - Information Exposure via legacy log file
Slug
restrict-content
Published
2024-04-10
Title
Restrict Content < 3.2.9 - Missing Authorization
Slug
restrict-content
Published
2025-01-25
Title
Membership Plugin – Restrict Content < 3.2.14 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
Slug
restrict-content
Published
2025-12-22
Title
Membership Plugin – Restrict Content < 3.2.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodes
Slug
restrict-content
Published
2026-01-15
Title
Membership Plugin – Restrict Content < 3.2.17 - Missing Authentication to Insecure Direct Object Reference and Sensitive Information Exposure
Slug
restrict-content
Published
2026-02-17
Title
Membership Plugin – Restrict Content < 3.2.19 - Authenticated (Administrator+) Stored Cross-Site Scripting via Invoice Settings
Slug
restrict-content
Published
2026-03-04
Title
Membership Plugin – Restrict Content < 3.2.21 - Unauthenticated Privilege Escalation via 'rcp_level'
Slug
restrict-content
Published
2026-03-19
Title
Membership Plugin – Restrict Content < 3.2.25 - Unvalidated Redirect in Password Reset Flow
Slug
restrict-content
Published
2026-03-20
Title
Membership Plugin – Restrict Content < 3.2.23 - Missing Authorization
Slug
restrict-elementor-widgets
Published
2025-12-13
Title
Restrict Elementor Widgets, Columns and Sections <= 1.12 - Missing Authorization
Slug
restrict-file-access
Published
2025-06-13
Title
Restrict File Access <= 1.1.2 - Authenticated (Subscriber+) Arbitrary File Read
Slug
restrict-file-access
Published
2025-07-14
Title
Restrict File Access <= 1.1.2 - Cross-Site Request Forgery to Arbitrary File Deletion
Slug
restrict-for-elementor
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
restrict-for-elementor
Published
2024-06-05
Title
Restrict for Elementor < 1.0.8 - Protection Mechanism Bypass
Slug
restrict-taxonomies
Published
2025-02-21
Title
Restrict Taxonomies <= 1.3.3 - Reflected Cross-Site Scripting
Slug
restrict-user-access
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
restrict-user-access
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
restrict-user-access
Published
2024-02-26
Title
Restrict User Access – Ultimate Membership & Content Protection < 2.6 - Information Exposure
Slug
restrict-user-access
Published
2024-03-18
Title
Restrict User Access – Membership Plugin with Force < 2.6 - Reflected Cross-Site Scripting
Slug
restrict-user-registration
Published
2025-04-10
Title
Restrict User Registration <= 1.0.1 Cross-Site Request Forgery to Stored Cross-Site Scripting