CVE-2024-11297

CVE-2024-11297 is a sensitive information exposure vulnerability affecting all versions up to 1.3.6 of the Page Restriction WordPress plugin. Unauthenticated attackers can exploit this flaw through the WordPress core search feature to extract restricted content, including data intended for administrators. With a CVSS score of 7.5 (High), this vulnerability is easily exploitable over the network with low complexity, potentially leading to significant confidentiality breaches. While there is no known active exploitation, public exploit code, or significant community discussion, the potential for data exposure remains a concern.