What’s Vulnerable › Products

stellarwp Membership Plugin – Restrict Content vulnerabilities

9 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.

Check whether your stellarwp Membership Plugin – Restrict Content version is affected

Latest stellarwp Membership Plugin – Restrict Content vulnerabilities

• CVE-2026-4136 — Membership Plugin – Restrict Content <= 3.2.24 - Unvalidated Redirect in Password Reset Flow via rcp_redirect (CVSS 4.3)
• CVE-2026-1321 — Membership Plugin – Restrict Content <= 3.2.20 - Unauthenticated Privilege Escalation via 'rcp_level' (CVSS 8.1)
• CVE-2026-1304 — Membership Plugin – Restrict Content <= 3.2.18 - Authenticated (Administrator+) Stored Cross-Site Scripting via Invoice Settings (CVSS 4.4)
• CVE-2025-14844 — Membership Plugin – Restrict Content <= 3.2.16 - Missing Authentication to Insecure Direct Object Reference and Sensitive Information Exposure (CVSS 7.5)
• CVE-2025-14000 — Membership Plugin – Restrict Content <= 3.2.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodes (CVSS 6.4)
• CVE-2024-11090 — Membership Plugin – Restrict Content <= 3.2.13 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure (CVSS 7.5)
• CVE-2024-31432 — WordPress Restrict Content plugin <= 3.2.8 - Broken Access Control vulnerability (CVSS 5.3)
• CVE-2023-47668 — WordPress Restrict Content Plugin <= 3.2.7 is vulnerable to Sensitive Data Exposure (CVSS 7.5)
• CVE-2023-3182 — Membership Plugin - Restrict Content < 3.2.3 - Reflected XSS (CVSS 6.1)