Vulnerabilities

TI-2025-19847 CVE-2025-26976 · GHSA-qf84-x8w9-99px

WordPress PrivateContent plugin <= 8.11.4 - SQL Injection vulnerability

LOW 39

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Aldo Latino PrivateContent private-content.This issue affects PrivateContent: from n/a through <= 8.11.4.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00338 Published 2025-03-15 No fix listed CWE-89

TI-2025-19840 CVE-2025-26969 · GHSA-f69x-699j-343p

WordPress PrivateContent plugin <= 8.11.5 - Subscriber+ Site Wide Broken Access Control vulnerability

LOW 36

Missing Authorization vulnerability in Aldo Latino PrivateContent.

CVSS 3.1HIGH 8.3 Network Low privileges No interaction EPSS 0.00304 Published 2025-03-15 No fix listed CWE-862

TI-2025-19837 CVE-2025-26966 · GHSA-x9jq-wh6c-xg75

WordPress PrivateContent plugin <= 8.11.5 - Unauthenticated Account Takeover vulnerability

MEDIUM 50

Authentication Bypass Using an Alternate Path or Channel vulnerability in Aldo Latino PrivateContent private-content.This issue affects PrivateContent: from n/a through <= 8.11.5.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00635 Published 2025-02-25 No fix listed CWE-288

Vulnerabilities

Filters

WordPress PrivateContent plugin <= 8.11.4 - SQL Injection vulnerability

WordPress PrivateContent plugin <= 8.11.5 - Subscriber+ Site Wide Broken Access Control vulnerability

WordPress PrivateContent plugin <= 8.11.5 - Unauthenticated Account Takeover vulnerability