[Plugin: O3World Members-Only Categories] private posts can be viewed via comments

to replicate your issue…

i created two categories named private one and private two, and a public category named public. i created posts in all 3. i created two test subscriber users. i logged in as the first and left a comment on private one. i logged out and logged in as the second and left a comment on private two.

and it’s definitely true that i can access those posts by following the links in the recent comments sidebar widget.

someone else had a similar issue with the provided categories widget showing private categories to anonymous users.

i believe this is an issue with how those widgets were engineered i.e. they do not respect the WP_Query parameter for supress_filters => false. which is to say, they are bypassing the filtering being done in my plugin.