Advisories · Technology
stellarwp Membership Plugin – Restrict Content.
Every CVE that names stellarwp Membership Plugin – Restrict Content among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 4.3 Medium
Membership Plugin – Restrict Content <= 3.2.24 - Unvalidated Redirect in Password Reset Flow via rcp_redirect
- stellarwp Membership Plugin – Restrict Content
- CWE-640
- CVSS 8.1 High
Membership Plugin – Restrict Content <= 3.2.20 - Unauthenticated Privilege Escalation via 'rcp_level'
- stellarwp Membership Plugin – Restrict Content
- Broken access control
- CVSS 4.4 Medium
Membership Plugin – Restrict Content <= 3.2.18 - Authenticated (Administrator+) Stored Cross-Site Scripting via Invoice Settings
- stellarwp Membership Plugin – Restrict Content
- Cross-site scripting (XSS)
- CVSS 8.2 High
Membership Plugin – Restrict Content <= 3.2.16 - Missing Authentication to Insecure Direct Object Reference and Sensitive Information Exposure
- stellarwp Membership Plugin – Restrict Content
- Broken access control
- CVSS 6.4 Medium
Membership Plugin – Restrict Content <= 3.2.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodes
- stellarwp Membership Plugin – Restrict Content
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
Membership Plugin – Restrict Content <= 3.2.13 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
- stellarwp Membership Plugin – Restrict Content
- Information disclosure
- CVSS 5.3 Medium
WordPress Restrict Content Plugin <= 3.2.7 is vulnerable to Sensitive Data Exposure
- StellarWP Membership Plugin – Restrict Content
- Information disclosure