WordPress PrivateContent plugin <= 9.9.2 - Privilege Escalation vulnerability
Incorrect Privilege Assignment vulnerability in LCweb PrivateContent allows Privilege Escalation.
No LCweb vulnerabilities are listed in CISA KEV.
6 records
Incorrect Privilege Assignment vulnerability in LCweb PrivateContent allows Privilege Escalation.
The The Global Gallery - WordPress Responsive Gallery plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 9.1.5.
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in LCweb PrivateContent - Mail Actions allows PHP Local File Inclusion.
Missing Authorization vulnerability in LCweb Global Gallery allows Exploiting Incorrectly Configured Access Control Security Levels.
Unauthenticated Cross Site Scripting (XSS) in Global Gallery <= 11.1.2 versions.
The PrivateContent plugin for WordPress is vulnerable to protection mechanism bypass due to the use of client side validation in versions up to, and including, 8.4.3.