Sensitive Information Exposure in WordPress Restrict Plugin

CVE-2024-11351

What is CVE-2024-11351?

The Restrict plugin for WordPress, which manages membership and content access restrictions, is susceptible to a vulnerability that enables unauthorized individuals to access sensitive information. This occurs through the WordPress core search feature, allowing unauthenticated users to extract data from posts typically restricted to higher-level roles, such as administrators. Users of the plugin should take immediate action to secure their installations and protect sensitive information from potential exposure.

References