WordPress Plugin Vulnerabilities

WP Private Content Plus < 2.0 - Unauthenticated Options Change

Description

The WP Private Content Plus WordPress plugin was affected by an Unauthenticated Options Change security vulnerability.

Affects Plugins

Plugin icon
wp-private-content-plus
Fixed in 2.0

References

CVE
CVE-2019-15816
URL
https://blog.nintechnet.com/unauthenticated-options-change-vulnerability-in-wordpress-wp-private-content-plus-plugin/
URL
https://plugins.trac.wordpress.org/changeset/2145057/wp-private-content-plus

Miscellaneous

Submitter
Ryan Dewhurst
Submitter twitter
ethicalhack3r
Verified
No
WPVDB ID
7c2786d4-1bad-4567-8cb6-ae37e7100b3d

Timeline

Publicly Published
2019-08-27 (about 6 years ago)
Added
2019-08-27 (about 6 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2025-07-24
Title
Timber < 1.23.3 - Use of a Vulnerable Dependency
Published
2015-04-20
Title
Crayon Syntax Highlighter 2.0 - 2.6.10 - Defacement
Published
2015-07-13
Title
CP Image Store with Slideshow <= 1.0.6 - Purchase ID Brute Force Prevention
Published
2014-12-02
Title
InfiniteWP Client <= 1.3.7 - Privilege Escalation
Published
2015-04-09
Title
WP REST API (WP API) <= 1.2 - Post Revision Disclosure