The “Restrict” plugin for WordPress, which controls access to membership, site content, and users, has a security issue. This issue allows unauthorized users to access sensitive information from restricted posts, even if they are meant for administrators.