LCweb PrivateContent vulnerabilities

Latest LCweb PrivateContent CVEs

Newest publication first

1. CVE-2026-57692 WordPress PrivateContent plugin <= 9.9.2 - Privilege Escalation vulnerability

   Published 2026-07-01

   Critical·CVSS 9.8 EPSS 0.53%

   Incorrect Privilege Assignment vulnerability in LCweb PrivateContent allows Privilege Escalation. This issue affects PrivateContent: from n/a through 9.9.2.

2. CVE-2023-0581 PrivateContent <= 8.4.3 - Protection Mechanism Bypass

   Published 2023-01-30

   Medium·CVSS 5.3 EPSS 0.73%

   The PrivateContent plugin for WordPress is vulnerable to protection mechanism bypass due to the use of client side validation in versions up to, and including, 8.4.3. This is due to the plugin checking if an IP had been blocklist via client-side scripts rather than server-side. T...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.