Anonymous Restricted Content Plugin Vulnerable to Information Disclosure

CVE-2024-0909

Summary

The Anonymous Restricted Content plugin, utilized within WordPress, has been identified to possess an information disclosure vulnerability affecting all versions up to and including 1.6.2. The root cause lies in inadequate restrictions imposed through the REST API on the posts and pages that are designed to have protections. This flaw potentially enables unauthenticated attackers to exploit the vulnerability, leading to unauthorized access to sensitive content that should be protected.

References