Privilege Escalation in LCweb PrivateContent Software
CVE-2026-57692

9.8CRITICAL

Key Information:

Vendor

WordPress
Status
Privatecontent
Vendor
CVE Published:
1 July 2026

What is CVE-2026-57692?

The LCweb PrivateContent software is subject to an Incorrect Privilege Assignment vulnerability that enables malicious actors to escalate their privileges, potentially allowing unauthorized access to restricted areas or sensitive information within the application. This vulnerability affects versions of PrivateContent from an unspecified version up to 9.9.2, necessitating immediate attention from users to secure their installations.

Affected Version(s)

PrivateContent <= 9.9.2

References

https://patchstack.com/database/wordpress/plugin/private-...
vdb-entry

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

0xd4rk5id3 | Patchstack Bug Bounty Program
.