Page and Post Restriction
Healthy: vulnerability published 29 Oct 2026, fixed in 1.6.2.
| Ownership | 100 |
|---|---|
| Maintenance | 100 |
| Security | 70 |
| Support | 70 |
| Reputation | 70 |
Active signals
Facts we detected, with links to the source.
- WarningSEC-1Vulnerability published 29 Oct 2026, fixed in 1.6.2. Update to version 1.6.2 or later.29 Oct 2026Evidence
- WarningSEC-1Vulnerability published 29 Oct 2026, fixed in 1.6.2. Update to version 1.6.2 or later.29 Oct 2026Evidence
- WarningSEC-1Vulnerability published 22 Oct 2026, fixed in 1.6.1. Update to version 1.6.1 or later.22 Oct 2026Evidence
- InfoSEC-35 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| plugin-master | 3 Aug 2020 to 3 Aug 2020, 1 commits |
|---|---|
| cyberlord92 | 7 Aug 2020 to 21 Mar 2022, 36 commits |
| anukasha | 1 Apr 2022 to 22 Jul 2024, 20 commits |
| mowpsamldev | 24 Dec 2024 to 29 Oct 2026, 12 commits |
4 committers recorded. No ownership changes recorded since 3 Nov 2026.
Maintenance
- Last release
- 6 days ago
- Releases, 24 months
- 10
- Tested up to
- 7.1 current
- Requires PHP
- 5.6 supported 8.2+
| Q1 2024 | 1 |
|---|---|
| Q2 2024 | 0 |
| Q3 2024 | 1 |
| Q4 2024 | 1 |
| Q1 2025 | 0 |
| Q2 2025 | 2 |
| Q3 2025 | 0 |
| Q4 2025 | 0 |
| Q1 2026 | 0 |
| Q2 2026 | 3 |
| Q3 2026 | 2 |
| Q4 2026 | 2 |
Last release 29 Oct 2026. Tested with WordPress 7.1 (current).
Support
Support history appears after our first snapshots of the forum counts.
Security record
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 29 Oct 2026 | Page and Post Restriction <= 1.6.1 - Unauthenticated Authentication Bypass via REST API Nonce Bypass via Cookie Re-Authentication | 6.5 | <= 1.6.1 | 1.6.2 | 0 |
| 29 Oct 2026 | Page and Post Restriction <= 1.6.1 - Missing Authorization | 5.3 | <= 1.6.1 | 1.6.2 | 0 |
| 22 Oct 2026 | Page and Post Restriction <= 1.6.0 - Missing Authorization | 5.3 | <= 1.6.0 | 1.6.1 | 0 |
| 4 Aug 2026 | Page and Post Restriction <= 1.4.1 - Unauthenticated Missing Authorization to Sensitive Information Exposure via REST API | 7.5 | <= 1.4.1 | 1.4.2 | 0 |
| 19 Dec 2024 | Page Restriction WordPress (WP) – Protect WP Pages/Post <= 1.3.6 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure | 5.3 | <= 1.3.6 | 1.3.7 | 6 |
| 27 Feb 2024 | Page Restriction WordPress (WP) – Protect WP Pages/Post <= 1.3.4 - Protection Mechanism Bypass | 5.3 | <= 1.3.4 | 1.3.5 | 0 |
| 9 Apr 2022 | Page Restriction WordPress <= 1.2.6 - Admin+ Stored Cross-Site Scripting | 5.5 | <= 1.2.6 | 1.2.7 | 0 |
Source: Wordfence Intelligence.
Reputation
Lifetime rating 4.3 from 16 ratings. Quarterly trends appear as new reviews arrive.
| 5 star | 13 |
|---|---|
| 4 star | 0 |
| 3 star | 0 |
| 2 star | 1 |
| 1 star | 2 |
Momentum
1,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 346 |
|---|---|
| 11 May 2026 | 191 |
| 18 May 2026 | 226 |
| 25 May 2026 | 122 |
| 1 Jun 2026 | 866 |
| 8 Jun 2026 | 237 |
| 15 Jun 2026 | 751 |
| 22 Jun 2026 | 342 |
| 29 Jun 2026 | 165 |
| 6 Jul 2026 | 232 |
| 13 Jul 2026 | 182 |
| 20 Jul 2026 | 128 |
| 27 Jul 2026 | 139 |
| 3 Aug 2026 | 273 |
| 10 Aug 2026 | 164 |
| 17 Aug 2026 | 139 |
| 24 Aug 2026 | 1,024 |
| 31 Aug 2026 | 268 |
| 7 Sep 2026 | 198 |
| 14 Sep 2026 | 276 |
| 21 Sep 2026 | 215 |
| 28 Sep 2026 | 1,059 |
| 5 Oct 2026 | 373 |
| 12 Oct 2026 | 284 |
| 19 Oct 2026 | 1,356 |
| 26 Oct 2026 | 1,708 |
| 2 Nov 2026 | 102 |
Weekly downloads over the last 4 weeks are 105% above the 27-week average.
Healthier alternatives
Same category, higher Canary Score. Never sponsored.
Facts
| Version | 1.6.2 |
|---|---|
| Author | miniOrange |
| Added | 7 Aug 2020 |
| Last updated | 29 Oct 2026 |
| Active installs | 1,000+ |
| Requires WordPress | 3.7 |
| Tested up to | 7.1.4 |
| Requires PHP | 5.6 |
| Category | User Management & Authentication > User Registration & Login |
| Tags | Restrict access, page restriction, Post Restriction, restrict content, content restriction |
Other plugins by this author: Social Login, Social Sharing by miniOrange, JWT Authentication for WP REST APIs, SAML Single Sign On - SSO Login, miniOrange 2FA - Two Factor Authentication for WordPress (Passkey, OTP, SMS, Email, Google Authenticator), Secure MCP Server for Claude, ChatGPT, Gemini and other AI Agents, OAuth Single Sign On - SSO (OAuth Client), Password Policy Manager, miniOrange OTP Login, Verification and SMS Notifications, Active Directory Integration / LDAP Integration, Custom API for WP, Prevent Files / Folders Access, WP OAuth Server ( Login with WordPress )
Questions
Is Page and Post Restriction still maintained?
Page and Post Restriction was last updated on 29 Oct 2026. Its Canary status is Healthy.
Is Page and Post Restriction safe?
Page and Post Restriction has no open unpatched vulnerabilities on record. 5 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.
Who owns Page and Post Restriction?
The wordpress.org author is miniOrange. Recent committers: mowpsamldev, anukasha, cyberlord92, plugin-master. We have recorded no ownership change.
What can I use instead of Page and Post Restriction?
Plugins in the same category with a higher Canary Score: Simple Membership After Login Redirection, My Private Site - Make Your Whole Site Private, Force Login & Block Registration Spam, Simple Membership Form Shortcode, SureMembers - Membership & Content Restriction Plugin, Groups 404 Redirect.