MP
Product
Membership Plugin – Restrict Content
7
CVEs
0
On KEV
8.1
Max CVSS
0
New 30D
Severity mix
Critical 0High 4Medium 3Low 0
Watch
Add Membership Plugin – Restrict Content to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-1321 | 8.1 | Mar 5 | Membership Plugin – Restrict Content <= 3.2.20 - Unauthenticated Privilege Escalation via 'rcp_level' Affected: through 3.2.20 |
| CVE-2025-14844 | 7.5 | Jan 16 | Membership Plugin – Restrict Content <= 3.2.16 - Missing Authentication to Insecure Direct Object Reference and Sensitive Information Exposure Affected: through 3.2.16 |
| CVE-2024-11090 | 7.5 | Jan 26 | Membership Plugin – Restrict Content <= 3.2.13 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure Affected: through 3.2.13 |
| CVE-2023-47668 | 7.5 | Nov 23 | WordPress Restrict Content Plugin <= 3.2.7 is vulnerable to Sensitive Data Exposure Affected: through 3.2.7 |
| CVE-2025-14000 | 6.4 | Dec 23 | Membership Plugin – Restrict Content <= 3.2.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodes Affected: through 3.2.15 |
| CVE-2026-1304 | 4.4 | Feb 18 | Membership Plugin – Restrict Content <= 3.2.18 - Authenticated (Administrator+) Stored Cross-Site Scripting via Invoice Settings Affected: through 3.2.18 |
| CVE-2026-4136 | 4.3 | Mar 20 | Membership Plugin – Restrict Content <= 3.2.24 - Unvalidated Redirect in Password Reset Flow via rcp_redirect Affected: through 3.2.24 |
Showing 7