Critical
CVE-2026-9273
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 12
Reset filters
Medium
CVE-2026-32546
Membership Plugin – Restrict Content <= 3.2.22 - Missing Authorization
Medium
CVE-2026-4136
Membership Plugin – Restrict Content <= 3.2.24 - Unvalidated Redirect in Password Reset Flow via rcp_redirect
High
CVE-2026-1321
Membership Plugin – Restrict Content <= 3.2.20 - Unauthenticated Privilege Escalation via 'rcp_level'
Medium
CVE-2026-1304
Membership Plugin – Restrict Content <= 3.2.18 - Authenticated (Administrator+) Stored Cross-Site Scripting via Invoice Settings
High
CVE-2025-14844
Membership Plugin – Restrict Content <= 3.2.16 - Missing Authentication to Insecure Direct Object Reference and Sensitive Information Exposure
Medium
CVE-2025-14000
Membership Plugin – Restrict Content <= 3.2.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodes
Medium
CVE-2024-11090
Membership Plugin – Restrict Content <= 3.2.13 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
Medium
CVE-2024-31432
Restrict Content <= 3.2.8 - Missing Authorization
Medium
CVE-2023-47668
Restrict Content <= 3.2.7 - Information Exposure via legacy log file
Medium
CVE-2023-3182
Restrict Content <= 3.2.2 - Reflected Cross-Site Scripting
Medium
79bb311d-d10d-4e4e-b690-84c0051b9911
Restrict Content <= 3.2.2 - Missing Authorization to Notice Dismissal
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.