https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T15:16:13.448040+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-78153 CVE-2026-78153 — Restrict User Access 2.6 - 2.8 - Unauthenticated Content Protection Bypass via REST API Route Normalization 2026-10-07T15:16:13.449421+00:00

Affected: Unknown Restrict User Access

The Restrict User Access WordPress plugin before 2.8.1 does not normalise the REST API route before checking it against the routes its content protection covers, allowing unauthenticated users to bypass that protection and read restricted content and enumerate users.