VULNERABILITY INTELLIGENCE

CVE-2025-43904

CVSS score4.2 MEDIUM

EPSS probability0.34%

CISA KEVNot currently listed

Published2026-01-16

Last modified2026-06-17

Description

The WP Private Content Plus plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.6.2 via the 'validate_restrictions' function. This makes it possible for unauthenticated attackers to extract sensitive data including the content of resticted posts on archive and feed pages.