CVE-2023-0581

The PrivateContent plugin for WordPress is vulnerable to protection mechanism bypass due to the use of client side validation in versions up to, and including, 8.4.3. This is due to the plugin checking if an IP had been blocklist via client-side scripts rather than server-side. This makes it possible for unauthenticated attackers to bypass any login restrictions that may prevent a brute force attack.

• CWE-602

• https://lcweb.it/privatecontent/changelogRelease Notes, Vendor Advisory
• https://www.wordfence.com/threat-intel/vulnerabilities/id/de73304e-7a28-4304-b1ed-2f6dd7738236?source=cve
• https://lcweb.it/privatecontent/changelogRelease Notes, Vendor Advisory
• https://www.wordfence.com/threat-intel/vulnerabilities/id/de73304e-7a28-4304-b1ed-2f6dd7738236Third Party Advisory

Published

Jan 30, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-0575External Control of Critical State Data, Improper Control of…9.8
• CVE-2023-0576Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2023-0577Improper Neutralization of Input During Web Page Generation …6.1
• CVE-2023-0578Improper Neutralization of Input During Web Page Generation …6.1
• CVE-2023-0579The YARPP WordPress plugin before 5.30.3 does not validate a…8.8
• CVE-2023-0580Insecure Storage of Sensitive Information vulnerability in A…9.8
• CVE-2023-0582Improper Limitation of a Pathname to a Restricted Directory …9.8
• CVE-2023-0583The VK Blocks plugin for WordPress is vulnerable to improper…4.3
• CVE-2023-0584The VK Blocks plugin for WordPress is vulnerable to improper…4.3
• CVE-2023-0585The All in One SEO Pack plugin for WordPress is vulnerable t…4.8
• CVE-2023-0586The All in One SEO Pack plugin for WordPress is vulnerable t…5.4
• CVE-2023-0587A file upload vulnerability in exists in Trend Micro Apex On…9.1