{"id":"CVE-2024-0687","aliases":["EUVD-2024-16478","GHSA-528q-7xpc-4jcv"],"status":"published","title":"Restrict User Access – Ultimate Membership \u0026 Content Protection \u003c= 2.5 - Information Exposure","description":"The Restrict User Access – Ultimate Membership \u0026 Content Protection plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.5 via API. This makes it possible for unauthenticated attackers to obtain the contents of posts and pages via API.","severity":{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00546,"percentile":0.46225,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-284"],"published":"2024-03-13T15:27:25Z","modified":"2026-06-17T06:54:02Z","products":[{"vendor":"dev.institute","product":"restrict_user_access"},{"vendor":"intoxstudio","product":"restrict user access – ultimate membership \u0026 content protection"}],"references":[{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f67684cd-3e0f-48bb-967a-16ea2b027843?source=cve","tags":["x_transferred","Third Party Advisory"]},{"url":"https://plugins.trac.wordpress.org/changeset?sfp_email=\u0026sfph_mail=\u0026reponame=\u0026new=3037773%40restrict-user-access%2Ftrunk\u0026old=3010745%40restrict-user-access%2Ftrunk\u0026sfp_email=\u0026sfph_mail=","tags":["x_transferred","Patch"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-0687"},{"url":"https://github.com/advisories/GHSA-528q-7xpc-4jcv"}],"sources":{"cve":[{"id":"CVE-2024-0687","title":"Restrict User Access – Ultimate Membership \u0026 Content Protection \u003c= 2.5 - Information Exposure","description":"The Restrict User Access – Ultimate Membership \u0026 Content Protection plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.5 via API. This makes it possible for unauthenticated attackers to obtain the contents of posts and pages via API.","status":"published","published":"2024-03-13T15:27:25.636Z","modified":"2026-04-08T17:33:33.852Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T14:34:22.852179Z"}],"euvd":[{"id":"EUVD-2024-16478","description":"The Restrict User Access – Ultimate Membership \u0026 Content Protection plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.5 via API. This makes it possible for unauthenticated attackers to obtain the contents of posts and pages via API.","status":"published","published":"2024-03-13T15:27:25Z","modified":"2026-04-08T17:33:33Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T19:24:33.344691Z"}],"ghsa":[{"id":"GHSA-528q-7xpc-4jcv","title":"The Restrict User Access – Ultimate Membership \u0026 Content Protection plugin for WordPress is...","description":"The Restrict User Access – Ultimate Membership \u0026 Content Protection plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.5 via API. This makes it possible for unauthenticated attackers to obtain the contents of posts and pages via API.","status":"published","published":"2024-03-13T18:31:32Z","modified":"2026-04-08T21:32:20Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T15:07:19.106047Z"}],"nvd":[{"id":"CVE-2024-0687","description":"The Restrict User Access – Ultimate Membership \u0026 Content Protection plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.5 via API. This makes it possible for unauthenticated attackers to obtain the contents of posts and pages via API.","status":"published","published":"2024-03-13T16:15:13.203Z","modified":"2026-06-17T06:54:02.367Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T14:09:40.831473Z"}]}}