Page Restriction Wordpress Wp
Monthly
Missing authorization in miniOrange Page Restriction WordPress through 1.6.1 allows unauthenticated remote requests to reach content the plugin is meant to restrict, exposing protected pages or posts with read-only confidentiality impact. The issue is CVSS 3.1 5.3 and is treated as a moderate-severity, low-priority problem; only sites that actually use this plugin's page/post restriction feature are affected. No public exploit identified at time of analysis, and no CISA KEV entry is present.
Missing authorization in miniOrange Page Restriction WordPress through 1.6.1 allows unauthenticated remote requests to reach content the plugin is meant to restrict, exposing protected pages or posts with read-only confidentiality impact. The issue is CVSS 3.1 5.3 and is treated as a moderate-severity, low-priority problem; only sites that actually use this plugin's page/post restriction feature are affected. No public exploit identified at time of analysis, and no CISA KEV entry is present.