Vulnerabilities

TI-2024-00627 CVE-2024-0680 · GHSA-x7m4-p3pg-xrfm

WP Private Content Plus <= 3.6 - Protection Mechanism Bypass

LOW 25

The WP Private Content Plus plugin for WordPress is vulnerable to information disclosure in all versions up to, and including, 3.6.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00603 Published 2024-02-28 No fix listed CWE-693

TI-2021-03242 CVE-2021-4385 · GHSA-m34p-w2ph-8hgm

WP Private Content Plus <= 3.1 - Cross-Site Request Forgery Bypass

LOW 22

The WP Private Content Plus plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.1.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00384 Published 2023-07-01 No fix listed CWE-352

TI-2019-11883 CVE-2019-15816 · GHSA-f4xm-r77v-3q82

The wp-private-content-plus plugin before 2.0 for WordPress has no protection against…

LOW 37

The wp-private-content-plus plugin before 2.0 for WordPress has no protection against option changes via save_settings_page and other save_ functions.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01999 Published 2019-08-30 No fix listed CWE-601

Vulnerabilities

Filters

WP Private Content Plus <= 3.6 - Protection Mechanism Bypass

WP Private Content Plus <= 3.1 - Cross-Site Request Forgery Bypass

The wp-private-content-plus plugin before 2.0 for WordPress has no protection against…