CVE WATCH / VULNERABILITY DETAIL
CVE-2026-113481
UNKNOWNCVSS 0NVD feed
Published 1 November 2026 · tracked since 1 November 2026
Description
The Media Library Assistant WordPress plugin before 3.44 does not check that the requesting user is allowed to view a post before disclosing which taxonomy terms are assigned to it, allowing any authenticated user, such as a subscriber, to learn the term assignments of private attachments and posts.
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-116474
- CVE-2026-120218 LOW 3.5
- CVE-2026-113482
- CVE-2026-118168
- CVE-2026-107342
- CVE-2026-107343
- CVE-2026-115946
- CVE-2026-118636 CRITICAL 9.8
- CVE-2026-120203 HIGH 8.8
- CVE-2026-76010 HIGH 8.8