LCweb vulnerabilities
We track 3 vulnerabilities in LCweb products across 4 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on July 1, 2026.
Latest LCweb vulnerabilities
- 9.8 Critical severity
PrivateContent: Incorrect Privilege Assignment
Incorrect Privilege Assignment vulnerability in LCweb PrivateContent allows Privilege Escalation. This issue affects PrivateContent: from n/a through 9.9.2.
- 7.5 High severity
PrivateContent - Mail Actions: Improper Control of Filename for Include/Require Statement in PHP Program
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in LCweb PrivateContent - Mail Actions allows PHP Local File Inclusion. This issue affects PrivateContent - Mail Actions: from n/a through 2.3
- 8.8 High severity
Global Gallery - WordPress Responsive Gallery: Improper Control of Generation of Code
The The Global Gallery - WordPress Responsive Gallery plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 9.1.5. This is due to the software allowing users to execute an action that does not properly valida