page_and_post_restriction vulnerabilities

CVEs whose affected-version data names the page_and_post_restriction package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-118194Medium· 6.5

1w ago

Page and Post Restriction <= 1.6.1 - Unauthenticated Authentication Bypass via REST API Nonce Bypass via Cookie Re-Authentication

The Page and Post Restriction plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.6.1 This is due to the `papr_restrict_page_post_rest_api()` function, hooked on `rest_pre_dispatch`, re-aut…

▾ Sunlitcyberlord92 · Page and Post RestrictionEPSS 0.34%via CVEORG