43 matches found
CVE-2024-11292
CVE-2024-11292 affects the WordPress plugin WP Private Content Plus (
WordPress plugin WP Private Content Plus 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
WordPress WP Private Content Plus plugin <= 3.6.1 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure vulnerability
Unauthenticated Content Restriction Bypass to Sensitive Information Exposure vulnerability discovered by Francesco Carlucci in WordPress Plugin WP Private Content Plus versions = 3.6.1...
CVE-2024-0680
The WP Private Content Plus plugin for WordPress is vulnerable to information disclosure in all versions up to, and including, 3.6. This is due to the plugin not properly restricting access to posts via the REST API when a page has been made private. This makes it possible for unauthenticated...
Information disclosure
The WP Private Content Plus plugin for WordPress is vulnerable to information disclosure in all versions up to, and including, 3.6. This is due to the plugin not properly restricting access to posts via the REST API when a page has been made private. This makes it possible for unauthenticated...
CVE-2024-0680 WP Private Content Plus <= 3.6 - Protection Mechanism Bypass
The WP Private Content Plus plugin for WordPress is vulnerable to information disclosure in all versions up to, and including, 3.6. This is due to the plugin not properly restricting access to posts via the REST API when a page has been made private. This makes it possible for unauthenticated...
CVE-2024-0680 WP Private Content Plus <= 3.6 - Protection Mechanism Bypass
The WP Private Content Plus plugin for WordPress is vulnerable to information disclosure in all versions up to, and including, 3.6. This is due to the plugin not properly restricting access to posts via the REST API when a page has been made private. This makes it possible for unauthenticated...
CVE-2024-0680
CVE-2024-0680 affects the WP Private Content Plus plugin for WordPress (versions up to and including 3.6). The root cause is improper access restriction of posts via the REST API when a page is private, allowing unauthenticated attackers to view protected posts. The vulnerability is documented ac...
WordPress Plugin WP Private Content Plus Security Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...
PT-2024-15744 · WordPress · Wp Private Content Plus
Name of the Vulnerable Software and Affected Versions: WP Private Content Plus plugin for WordPress versions up to, and including, 3.6 Description: The issue is related to information disclosure due to the plugin not properly restricting access to posts via the REST API when a page has been made...
WordPress WP Private Content Plus Plugin <= 3.6 is vulnerable to Bypass Vulnerability
Software WP Private Content Plus Type Plugin Vulnerable versions = 3.6 Fixed in 3.6.1 OWASP Top 10 A4: Insecure Design Classification Bypass Vulnerability CVE CVE-2024-0680 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 0b6db52774fe Credits Francesco Carlucci Required...
CVE-2021-4385
The CVE-2021-4385 entry concerns the WP Private Content Plus WordPress plugin (
CVE-2021-4385 WP Private Content Plus <= 3.1 - Cross-Site Request Forgery Bypass
The WP Private Content Plus plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.1. This is due to missing or incorrect nonce validation on the savegroups function. This makes it possible for unauthenticated attackers to add new group members via a...
WordPress Plugin WP Private Content Plus 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...
PT-2023-12497 · WordPress · Wp Private Content Plus
Name of the Vulnerable Software and Affected Versions: WP Private Content Plus plugin for WordPress versions up to and including 3.1 Description: The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the save groups function. This allows unauthenticate...
WordPress WP Private Content Plus plugin <= 3.1 - Cross-Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability found in WordPress WP Private Content Plus plugin versions = 3.1. Solution Update the WordPress WP Private Content Plus plugin to the latest available version at least 3.2...
CVE-2019-15816
The CVE-2019-15816 entry concerns the WordPress plugin wp-private-content-plus. Connected sources confirm that versions before 2.0 allow option changes via save_settings_page and other save_ functions without proper protection, enabling unauthenticated modification of plugin options. The vulnerab...
CVE-2019-15816
The wp-private-content-plus plugin before 2.0 for WordPress has no protection against option changes via savesettingspage and other save functions...
