UNKNOWN NVD

CVE-2026-118637

The Simple Download Monitor WordPress plugin before 4.1.3 does not properly check the visibility of the content referenced by one of its shortcodes, allowing us

The Simple Download Monitor WordPress plugin before 4.1.3 does not properly check the visibility of the content referenced by one of its shortcodes, allowing users with a role as low as Contributor to disclose the title and description of private, draft and other non-public posts.

References

https://wpscan.com/vulnerability/bf1275d7-f48b-4f30-90f1-024604aaf848/

Published: 2026-11-04 · Source: NVD · Feed updated: 2026-11-04

This unknown severity vulnerability was published on 2026-11-04 via NVD.

vulnfeed aggregates 18348 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.