Skip to content
OpenAdvisories

Product · brandonwamboldt

WordPress Access Control

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2024-0975

    WordPress Access Control <= 4.0.13 - Improper Access Control to Sensitive Information Exposure via REST API

    The WordPress Access Control plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.0.13 via the REST API. This makes it possible for unauthenticated attackers to bypass the plugin's "Make Website Members …

    brandonwamboldt WordPress Access Control Web / CMS