Stellarwp Restrict Content vulnerabilities

• stellarwp restrict content WordPress Restrict Content plugin <= 3.2.22 - Broken Access Control vulnerability CVE-2026-32546 7.5 HighMarch 25, 2026
• stellarwp membership plugin – restrict content Membership Plugin – Restrict Content <= 3.2.24 - Unvalidated Redirect in Password Reset Flow via rcp_redirect CVE-2026-4136 4.3 MediumMarch 20, 2026
• stellarwp membership plugin – restrict content Membership Plugin – Restrict Content <= 3.2.20 - Unauthenticated Privilege Escalation via 'rcp_level' CVE-2026-1321 8.1 HighMarch 5, 2026
• stellarwp membership plugin – restrict content Membership Plugin – Restrict Content <= 3.2.18 - Authenticated (Administrator+) Stored Cross-Site Scripting via Invoice Settings CVE-2026-1304 4.4 MediumFebruary 18, 2026
• liquidweb restrict content, stellarwp membership plugin – restrict content +1 more Membership Plugin – Restrict Content <= 3.2.16 - Missing Authentication to Insecure Direct Object Reference and Sensitive Information Exposure CVE-2025-14844 8.2 HighJanuary 16, 2026
• stellarwp membership plugin – restrict content Membership Plugin – Restrict Content <= 3.2.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodes CVE-2025-14000 6.4 MediumDecember 23, 2025
• liquidweb restrict content, stellarwp membership plugin – restrict content +1 more Membership Plugin – Restrict Content <= 3.2.13 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure CVE-2024-11090 5.3 MediumJanuary 26, 2025
• liquidweb restrict content WordPress Restrict Content plugin <= 3.2.8 - Broken Access Control vulnerability CVE-2024-31432 5.3 MediumApril 15, 2024
• liquidweb restrict content, stellarwp membership plugin – restrict content +1 more WordPress Restrict Content Plugin <= 3.2.7 is vulnerable to Sensitive Data Exposure CVE-2023-47668 Public exploit 5.3 MediumNovember 23, 2023