Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-11-12
Restrict User Access - Security Vulnerability (CVE-2026-124271)
Missing Authorization vulnerability in DEV Institute Restrict User Access – Membership Plugin with Force restrict-user-access allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Restrict User Access – Membership Plugin with Force: from n/a through 2.8.3.
PLUGIN
Restrict User Access
CVE-2026-124271
Risk Score
Threat Entry
Updated 2026-11-12
Restrict User Access - Security Vulnerability (CVE-2026-115600)
Missing Authorization vulnerability in DEV Institute Restrict User Access – Membership Plugin with Force restrict-user-access allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Restrict User Access – Membership Plugin with Force: from n/a through 2.8.3.
PLUGIN
Restrict User Access
CVE-2026-115600
Risk Score
Threat Entry
Updated 2026-10-09
Restrict User Access - Security Vulnerability (CVE-2026-62040)
Missing Authorization vulnerability in DEV Institute Restrict User Access – Membership Plugin with Force restrict-user-access allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Restrict User Access – Membership Plugin with Force: from n/a through 2.8.1.
PLUGIN
Restrict User Access
CVE-2026-62040
Risk Score
Threat Entry
Updated 2026-09-03
Restrict User Access - Security Vulnerability (CVE-2026-78153)
The Restrict User Access WordPress plugin before 2.8.1 does not normalise the REST API route before checking it against the routes its content protection covers, allowing unauthenticated users to bypass that protection and read restricted content and enumerate users.
PLUGIN
Restrict User Access
CVE-2026-78153
Risk Score
Threat Entry
Updated 2026-06-17
Restrict User Access - Cross-Site Scripting (XSS) (CVE-2024-29138)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Joachim Jensen Restrict User Access – Membership Plugin with Force restrict-user-access.This issue affects Restrict User Access – Membership Plugin with Force: from n/a through
PLUGIN
Restrict User Access
CVE-2024-29138
Risk Score
Threat Entry
Updated 2026-06-17
Restrict User Access - Information Disclosure (CVE-2024-0687)
The Restrict User Access – Ultimate Membership & Content Protection plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.5 via API. This makes it possible for unauthenticated attackers to obtain the contents of posts and pages via API.
PLUGIN
Restrict User Access
CVE-2024-0687
Risk Score