CVE-2024-11090

MEDIUM

Membership Plugin – Restrict Content <= 3.2.13 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2024-11090 has a selected CVSS score of 5.3 (medium).

Description

The Membership Plugin – Restrict Content plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.2.13 via the WordPress core search feature. This makes it possible for unauthenticated attackers to extract sensitive data from posts that have been restricted to higher-level roles such as administrator.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone
AutomatableYes
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Jan 27, 2025 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

Membership Plugin – Restrict Content

Browse stellarwp / Membership Plugin – Restrict Content

Default status: unaffected

CVE ListThrough 3.2.13affected

References

3