CVE-2024-1083

The Simple Restrict plugin for WordPress, in all versions up to and including 1.2.6, is susceptible to a sensitive information exposure vulnerability via its REST API. This flaw allows authenticated attackers to bypass the plugin's restrictions and extract post titles and content. Rated as MEDIUM severity (CVSS 5.3), the vulnerability has a network attack vector and low attack complexity, potentially leading to unauthorized disclosure of sensitive information. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.