Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Wpexpertdeveloper records in CISA KEVNo Wpexpertdeveloper vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority LOW 37
The wp-private-content-plus plugin before 2.0 for WordPress has no protection against option changes via save_settings_page and other save_ functions.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.01999 · Published 2019-08-30 · No fix listed CWE-601
Priority LOW 25
The WP Private Content Plus plugin for WordPress is vulnerable to information disclosure in all versions up to, and including, 3.6.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00603 · Published 2024-02-28 · No fix listed CWE-693
Priority LOW 22
The WP Private Content Plus plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.1.
CVSS 3.1MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.00384 · Published 2023-07-01 · No fix listed CWE-352
