CyberRota Analysis
AI-GeneratedThe User Access Manager plugin for WordPress prior to version 2.3.15 fails to enforce access restrictions on REST API requests, enabling unauthenticated attackers to access restricted content, including posts and pages meant for specific user groups. This vulnerability poses a significant risk to the confidentiality of sensitive information within WordPress sites. Website administrators using this plugin should prioritize updating to the latest version to mitigate potential data exposure.
Original NVD Description
The User Access Manager WordPress plugin before 2.3.15 does not apply its access restrictions to REST API requests, allowing unauthenticated attackers to read the content of posts, pages and custom post types that have been restricted to specific user groups.