CVE-2026-110227: WordPress Restricted Site Access plugin <= 7.6.2 - Broken Access Control vulnerability
Missing Authorization vulnerability in 10up Restricted Site Access restricted-site-access allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Restricted Site Access: from n/a through 7.6.2.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
10up Restricted Site Accessto a version that resolves this vulnerability.Fixed in 7.6.3
Event History
Frequently Asked Questions
Which deployments are affected?
The issue affects 10up Restricted Site Access versions through 7.6.2. The available data does not identify a version that fixes the vulnerability.
Does exploitation require authentication or user interaction?
No. The supplied vector indicates network access, low attack complexity, no privileges required, and no user interaction required.
What is the likely security impact?
The supplied severity vector rates the issue as medium with low confidentiality impact and no integrity or availability impact. The vulnerability concerns incorrectly configured access-control security levels.