StellarWP Membership Plugin – Restrict Content

• CVE-2026-4136 Medium 4.3 Membership Plugin – Restrict Content <= 3.2.24 - Unvalidated Redirect in Password Reset Flow via rcp_redirect 0.2%
• CVE-2026-1321 High 8.1 Membership Plugin – Restrict Content <= 3.2.20 - Unauthenticated Privilege Escalation via 'rcp_level' 0.4%
• CVE-2026-1304 Medium 4.4 Membership Plugin – Restrict Content <= 3.2.18 - Authenticated (Administrator+) Stored Cross-Site Scripting via Invoice Settings 0.4%
• CVE-2025-14844 High 8.2 Membership Plugin – Restrict Content <= 3.2.16 - Missing Authentication to Insecure Direct Object Reference and Sensitive Information Exposure 0.5%
• CVE-2025-14000 Medium 6.4 Membership Plugin – Restrict Content <= 3.2.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodes 0.2%
• CVE-2024-11090 Medium 5.3 Membership Plugin – Restrict Content <= 3.2.13 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure 0.5%
• CVE-2023-47668 Medium 5.3 WordPress Restrict Content Plugin <= 3.2.7 is vulnerable to Sensitive Data Exposure 1.0%