It’s expected behavior that when the organization-wide default for Contact is set to "Controlled by Parent" and if the user has access to the Account record, they’ll have access to all Contact records associated with the Account record. Without the setting "Allow users to see contacts that have not been enabled for partner or customer accounts" enabled, Customer Community Plus users can only view the Portal or site-enabled Contact associated with Account to which they have Read, or Read and Write access.
To allow Customer Community Plus license users to view all Contacts associated with Account they have access to, enable the setting:
In Salesforce Classic
In Lightning Experience
Note: When the Contact is controlled by the parent record, this setup works if the users can see Contacts from private Accounts to which they have 'Read' access.
000382955

We use three kinds of cookies on our websites: required, functional, and advertising. You can choose whether functional and advertising cookies apply. Click on the different cookie categories to find out more about each category and to change the default settings.
Privacy Statement
Required cookies are necessary for basic website functionality. Some examples include: session cookies needed to transmit the website, authentication cookies, and security cookies.
Functional cookies enhance functions, performance, and services on the website. Some examples include: cookies used to analyze site traffic, cookies used for market research, and cookies used to display advertising that is not directed to a particular individual.
Advertising cookies track activity across websites in order to understand a viewer’s interests, and direct them specific marketing. Some examples include: cookies used for remarketing, or interest-based advertising.