RestrictMate CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

CRITICAL RestrictMate CVE published 2026-08-23

CVE-2026-13598

CVE-2026-13598 is a critical vulnerability in the RestrictMate WordPress plugin that allows unauthenticated attackers to create a new administrator account and gain a logged-in administrator session, leading to full site takeover. This vulnerability affects WordPress site administrators and security teams who need to verify exposure and apply patches as high priority. The vulnerability is caused by the pl [truncated]