The Restricted Site Access plugin for WordPress is not secure in versions up to 7.3.1. It is possible for someone to bypass certain restrictions based on the visitor’s IP address by manipulating certain details about their connection. This means that any limitations that were set up with this plugin may not be reliable.