Unscored CVE-2019-15816 EUVD-2019-6733GHSA-f4xm-r77v-3q82

The wp-private-content-plus plugin before 2.0 for WordPress has no protection against option changes via save_settings_page and other save_…

Published Aug 30, 2019 · Updated Aug 5, 2024 · Assigned by mitre

Description

The wp-private-content-plus plugin before 2.0 for WordPress has no protection against option changes via save_settings_page and other save_ functions.

References

https://wpvulndb.com/vulnerabilities/9817
https://wordpress.org/plugins/wp-private-content-plus/#developers
https://blog.nintechnet.com/unauthenticated-options-change-vulnerability-in-wordpress-wp-private-content-plus-plugin/