CVE-2024-11295 affects the Simple Page Access Restriction plugin for WordPress, allowing sensitive information exposure in all versions up to 1.0.29. Unauthenticated attackers can leverage the WordPress core search feature to extract restricted data from posts intended for higher-level user roles. This vulnerability has a CVSS score of 5.3 (Medium), indicating a low attack complexity and no user interaction required, with a potential impact of sensitive data disclosure. There is currently no known active exploitation, exploit code available in common frameworks, or significant community discussion or media coverage surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 0, <= 1.0.29CPE match | cpe:2.3:a:pluginsandsnippets:simple_page_access_restriction:*:*:*:*:*:wordpress:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.