CVE-2026-118637
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
Nov 04, 2026
Vendor
unknown
Description
The Simple Download Monitor WordPress plugin before 4.1.3 does not properly check the visibility of the content referenced by one of its shortcodes, allowing users with a role as low as Contributor to disclose the title and description of private, draft and other non-public posts.