Skip to content
Founder-led WordPress incident response and care Request an assessment
3zerodigital Request a Website Assessment

Plugin security history

Absolute Privacy Vulnerability History & Security Timeline

The Wordfence Intelligence dataset currently contains 2 vulnerability records associated with Absolute Privacy, published between 2011 and 2023.

Dataset last synchronized: 2026-08-03 00:31:25 UTC

At a glance

Security Snapshot

2Total records
1Critical
1High
0Medium
0Low
0Informational
1Patched records
1Currently marked unpatched
2011-12-15First disclosure
2023-08-09Latest disclosure
1 of 2CVE coverage

Year-by-Year Timeline

YearRecordsRelative volume
201111 records
202311 records

Severity Breakdown

SeverityRecordsShare
Critical150%
High150%

Vulnerability-Type Breakdown

Authentication Bypass

1 record50%

First: 2011. Latest: 2011.

CSRF

1 record50%

First: 2023. Latest: 2023.

Patch Status

Patched
1
Currently marked unpatched
1
Unknown status
0

Patch status reflects the latest successfully synchronized source dataset and must be checked against the installed version.

Latest Known Patched Versions

  • 2.0.6

Affected-Version History

Ranges are deduplicated by source range record and shown with the associated disclosure and known patched versions.

Affected rangeVulnerabilityPublishedPatched versionSeverity
*-2.1Absolute Privacy <= 2.1 - Cross-Site Request Forgery to User Email/Password ChangeAugust 9, 2023Not suppliedHigh
*-2.0.5Absolute Privacy <= 2.0.5 - Authentication BypassDecember 15, 20112.0.6Critical

Selected source records

Latest Records

HighCVE-2023-4276

Absolute Privacy <= 2.1 - Cross-Site Request Forgery to User Email/Password Change

Published: August 9, 2023

Affected versions
*-2.1
Patched versions
Not supplied
Original Wordfence record
Critical

Absolute Privacy <= 2.0.5 - Authentication Bypass

Published: December 15, 2011

Affected versions
*-2.0.5
Patched versions
2.0.6
Original Wordfence record

Highest-Severity Records

Critical

Absolute Privacy <= 2.0.5 - Authentication Bypass

Published: December 15, 2011

Affected versions
*-2.0.5
Patched versions
2.0.6
Original Wordfence record
HighCVE-2023-4276

Absolute Privacy <= 2.1 - Cross-Site Request Forgery to User Email/Password Change

Published: August 9, 2023

Affected versions
*-2.1
Patched versions
Not supplied
Original Wordfence record

Currently Marked Unpatched Records

HighCVE-2023-4276

Absolute Privacy <= 2.1 - Cross-Site Request Forgery to User Email/Password Change

Published: August 9, 2023

Affected versions
*-2.1
Patched versions
Not supplied
Original Wordfence record

View all associated vulnerabilities

Need help reviewing an exposed WordPress website?

Running an affected version does not prove that a website was compromised. Suspicious redirects, unknown administrators, injected content, unexpected files or recurring malware may require a manual investigation.

Vulnerability data: Wordfence Intelligence. Analysis and practical guidance: 3Zero Digital.

Data Source, Attribution and Methodology

This page aggregates active Production Feed records. Counts are not software-quality rankings, and an affected version does not prove exploitation or infection. Read the full methodology.

Return to the Security History Directory