CVE-2024-1083
Assigner: Wordfence
Published: 2024-03-13T15:26:54.362Z
State: PUBLISHED
affected: vendor: wpchill
product: Simple Restrict
versions: version: *
status: affected
lessThanOrEqual: 1.2.6
versionType: semver
defaultStatus: unaffected
descriptions: value: The Simple Restrict plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.2.6 via the REST API. This makes it possible for authenticated attackers to bypass the plugin's restrictions to extract post titles and content
problemTypes: descriptions: description: CWE-200 Information Exposure
metrics: cvssV3_1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
baseScore: 5.3
baseSeverity: MEDIUM
credits: type: finder
value: Francesco Carlucci
timeline: time: 2024-03-07T00:00:00.000+00:00
value: Disclosed