Description
WordPress Plugin Restricted Site Access is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently bypass IP-based limitations in certain situations. WordPress Plugin Restricted Site Access version 7.3.1 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 7.3.2 or latest
References
https://sploitus.com/exploit?id=WPEX-ID:C03863EF-9AC9-402B-8F8D-9559C9988E2B
https://plugins.svn.wordpress.org/restricted-site-access/trunk/readme.txt
Related Vulnerabilities
WordPress 5.7.x Multiple Vulnerabilities (5.7 - 5.7.6)
WordPress Plugin Click to Call or Chat Buttons Cross-Site Scripting (1.4.0)
WordPress Plugin User Role Editor Cross-Site Request Forgery (3.12)
Jboss EAP Permissions, Privileges, and Access Controls Vulnerability (CVE-2019-3894)
WordPress Plugin iThemes Security (formerly Better WP Security) Cross-Site Scripting (3.2.4)