Incorrect Privilege Assignment vulnerability in LCweb PrivateContent allows Privilege Escalation.

This issue affects PrivateContent: from n/a through 9.9.2.

A vulnerability identified as CVE-2026-57692 affects the LCweb PrivateContent WordPress plugin up to and including version 9.9.2. The flaw is classified as an Incorrect Privilege Assignment vulnerability, which can be exploited to achieve Privilege Escalation. This type of vulnerability allows attackers to gain higher-level permissions than intended within the affected system. The issue was reported via NVD (National Vulnerability Database) and documented by Patchstack. No specific workaround is noted other than updating beyond version 9.9.2. The vulnerability poses a significant risk to WordPress sites running the affected plugin versions. Site administrators are advised to update the plugin to a patched version as soon as one becomes available.