The Simple Page Access Restriction plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0.29 via the WordPress core search feature. This makes it possible for unauthenticated attackers to extract sensitive data from posts that have been restricted to higher-level roles such as logged-in users.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Simple Page Access Restriction Plugin | — | Update simple-page-access-restriction plugin to version 1.0.30, or a newer patched version | May 15, 2025 | Dec 17, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub