PT-2025-41778
CVE-2025-10720
·
Published
2025-09-19
·
Updated
2026-10-08
Description by
CVSS 3.1
6.5
MediumMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
WP Private Content Plus versions through 3.6.2
Description
The software includes a content protection feature requiring a password, but the access control check relies solely on a client-side cookie. An unauthenticated attacker can bypass the password protection by manually setting the cookie value in their browser.
Recommendations
Update to a version beyond 3.6.2.
Found an issue in the description? Have something to add? Feel free to write us 👾