Restrict vulnerabilities

Products

• Restrict 1
• Restrict for Elementor 1

Latest Restrict CVEs

Newest publication first

1. CVE-2024-0910 Restrict for Elementor <= 1.0.7 - Protection Mechanism Bypass

   Published 2024-06-06

   Medium·CVSS 5.3

   The Restrict for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0.7 due to improper restrictions on hidden data that make it accessible through the REST API. This makes it possible for unauthenticated attacke...

2. CVE-2023-41861 WordPress Restrict Plugin <= 2.2.4 is vulnerable to Cross Site Scripting (XSS)

   Published 2023-09-26

   Medium·CVSS 6.1

   Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Restrict plugin <= 2.2.4 versions.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.