WordPress security by component
WP Private Content Plus
Plugin description
WP Private Content Plus is a WordPress component with 5 published CVE records in this archive. The latest tracked vulnerability was published Aug 12, 2025; the highest CVE/CNA score is 7.5.
Plugin slug:
wp-private-content-plusLatest vulnerability
CVE-2025-4390: WP Private Content Plus: Sensitive information exposure
WP Private Content Plus is affected by sensitive information exposure. The vulnerable path is reachable without authentication. Successful exploitation can disclose data that should not be available to the caller.
| Safe version |
|
||
|---|---|---|---|
| Aug 12, 2025 |
CVE-2025-4390
WP Private Content Plus: Sensitive information exposure
WP Private Content Plus is affected by sensitive information exposure. The vulnerable path is reachable without authentication. Successful exploitation can disclose data that should not be available to the caller.
|
See mitigation notes |
CVE5.3
NVDPending
|
| Dec 06, 2024 |
CVE-2024-11292
WP Private Content Plus: Sensitive information exposure
WP Private Content Plus is affected by sensitive information exposure. The vulnerable path is reachable without authentication. Successful exploitation can disclose data that should not be available to the caller.
|
See mitigation notes |
CVE5.3
NVDPending
|
| Feb 28, 2024 |
CVE-2024-0680
WP Private Content Plus: Sensitive information exposure
WP Private Content Plus is affected by sensitive information exposure. The vulnerable path is reachable without authentication. Successful exploitation can disclose data that should not be available to the caller.
|
See mitigation notes |
CVE5.3
NVDPending
|
| Jul 01, 2023 |
CVE-2021-4385
WP Private Content Plus: Cross-site request forgery
WP Private Content Plus is affected by cross-site request forgery. The vulnerable path is reachable without authentication. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.
|
See mitigation notes |
CVE4.3
NVD4.3
|
| Aug 30, 2019 |
CVE-2019-15816
Wp Private Content Plus: A security weakness
Wp Private Content Plus is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE7.5
NVD7.5
|