Unauthenticated options change vulnerability in WordPress WP Private Content Plus plugin. https://blog.nintechnet.com/unauthenticated-options-change-vulnerability-in-wordpress-wp-private-content-plus-plugin/