PT-2024-16576
CVE-2024-1083
·
تاريخ النشر
2024-03-13
·
تاريخ التحديث
2025-03-11
الوصف من
CVSS 3.1
5.3
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
The Simple Restrict plugin for WordPress versions up to, and including, 1.2.6
Description
The issue allows authenticated attackers to bypass the plugin's restrictions, extracting post titles and content via the REST API.
Recommendations
For versions up to, and including, 1.2.6, update to a version that contains a fix for this issue, as the current version allows exploitation through the REST API.
As a temporary workaround, consider restricting access to the REST API until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾