Aldo Latino PrivateContent Authentication Bypass Vulnerability Allowing Unauthenticated Account Takeover

An authentication bypass vulnerability has been identified in the Aldo Latino PrivateContent WordPress plugin, affecting versions through 8.11.5. This vulnerability allows unauthenticated users to bypass authentication mechanisms, potentially leading to unauthorized account takeover.

Impact

Exploitation of this vulnerability could allow an attacker to gain unauthorized access to user accounts, including accounts with administrative privileges.

Remediation

Users of the Aldo Latino PrivateContent WordPress plugin are advised to update to the latest version. For those unable to update immediately, Patchstack offers a virtual patch that can be applied to mitigate this vulnerability.