WP Private Content Plus — Plugin Vulnerabilities

Medium 6.5 Unfixed Closed

2025-10-13≤ 3.6.2

CVE-2025-10720

CVE EUVD Wordfence

Medium 5.3 Unfixed Closed

2025-08-12≤ 3.6.2

WP Private Content Plus <= 3.6.2 - Unauthenticated Sensitive Information Exposure

EUVD Wordfence CVE

Medium 5.3 Closed

2024-12-06< 3.6.2

CVE-2024-11292

CVE Wordfence Patchstack

Medium 5.3 Closed

2024-02-28< 3.6.1

CVE-2024-0680

CVE Wordfence Patchstack WPScan

N/A Closed

< 3.2

WP Content Plus < 3.2 - CSRF Nonce Bypass

WPScan

N/A Closed

2023-01-14< 3.5

WP Private Content Plus <= 3.4 - Authenticated(Admin+) Stored Cross-Site Scripting

Wordfence

Medium 4.3 Closed

2023-07-01< 3.2

CVE-2021-4385

CVE Wordfence WPScan

N/A Closed

2023-06-07< 3.2

CVE-2021-4342

CVE

N/A Closed

< 3.2

Various Affected Software (Various Versions) - Cross-Site Request Forgery Bypass

Wordfence

N/A Closed

< 3.2

WP Private Content Plus <= 3.1 - Cross-Site Request Forgery to Member Creation

Wordfence

N/A Closed

2019-08-27< 2.0

WordPress WP Private Content Plus plugin <= 1.31 - Unauthenticated Options Change vulnerability

Patchstack

N/A Closed

2021-02-19< 3.2

WordPress WP Private Content Plus plugin <= 3.1 - Cross-Site Request Forgery (CSRF) vulnerability

Patchstack

High 7.5 Closed

2019-08-30< 2.0

CVE-2019-15816

CVE Wordfence WPScan