Show filters
5 Total Results
Displaying 1-5 of 5
Sort by:
Attacker Value
Unknown
CVE-2025-26976
Disclosure Date: March 15, 2025 (last updated March 16, 2025)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Aldo Latino PrivateContent. This issue affects PrivateContent: from n/a through 8.11.4.
0
Attacker Value
Unknown
CVE-2025-26972
Disclosure Date: March 15, 2025 (last updated March 16, 2025)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound PrivateContent. This issue affects PrivateContent: from n/a through 8.11.5.
0
Attacker Value
Unknown
CVE-2025-26969
Disclosure Date: March 15, 2025 (last updated March 16, 2025)
Missing Authorization vulnerability in Aldo Latino PrivateContent. This issue affects PrivateContent: from n/a through 8.11.5.
0
Attacker Value
Unknown
CVE-2025-26966
Disclosure Date: February 25, 2025 (last updated February 26, 2025)
Authentication Bypass Using an Alternate Path or Channel vulnerability in Aldo Latino PrivateContent. This issue affects PrivateContent: from n/a through 8.11.5.
0
Attacker Value
Unknown
CVE-2023-0581
Disclosure Date: January 30, 2023 (last updated February 24, 2025)
The PrivateContent plugin for WordPress is vulnerable to protection mechanism bypass due to the use of client side validation in versions up to, and including, 8.4.3. This is due to the plugin checking if an IP had been blocklist via client-side scripts rather than server-side. This makes it possible for unauthenticated attackers to bypass any login restrictions that may prevent a brute force attack.
0
