CVE-2024-1083

Name of the Vulnerable Software and Affected Versions The Simple Restrict plugin for WordPress versions up to, and including, 1.2.6

Description The issue allows authenticated attackers to bypass the plugin's restrictions, extracting post titles and content via the REST API.

Recommendations For versions up to, and including, 1.2.6, update to a version that contains a fix for this issue, as the current version allows exploitation through the REST API. As a temporary workaround, consider restricting access to the REST API until a patch is available.