Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-09-01
Page Restrict - Cross-Site Request Forgery (CSRF) (CVE-2024-24702)
Cross-Site Request Forgery (CSRF) vulnerability in Matt Martz & Andy Stratton Page Restrict.This issue affects Page Restrict: from n/a through 2.5.5.
PLUGIN
Page Restrict
CVE-2024-24702
Risk Score
Threat Entry
Updated 2026-09-01
Page Restrict - Information Disclosure (CVE-2024-0682)
The Page Restrict plugin for WordPress is vulnerable to information disclosure in all versions up to, and including, 2.5.5. This is due to the plugin not properly restricting access to posts via the REST API when a page has been made private. This makes it possible for unauthenticated attackers to view protected posts.
PLUGIN
Page Restrict
CVE-2024-0682
Risk Score