CVE-2024-0687

MEDIUM 5.3CVE-2024-0687 · Published 13/03/2024 · updated 17/06/2026

In short

CVE-2024-0687 is a MEDIUM (CVSS 5.3) vulnerability affecting restrict user access (dev.institute).
Chance of exploitation in the next 30 days (EPSS): 0.55%, higher than 45.9% of all vulnerabilities.
Fix: update to 2.6 or later.

Package	Affected versions	Patched versions
restrict user access dev.institute	`< 2.6`	`2.6`

Description

The Restrict User Access – Ultimate Membership & Content Protection plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.5 via API. This makes it possible for unauthenticated attackers to obtain the contents of posts and pages via API.

References

plugins.trac.wordpress.org/changeset · Patch
wordfence.com/threat-intel/vulnerabilities/id/f67684cd-3e0f-48bb-967a-16ea2b027843 · Third Party Advisory

More vulnerabilities in restrict user access

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free