{"id":"CVE-2026-118637","published":"2026-11-04T06:17:03.380","lastModified":"2026-11-04T06:17:03.380","description":"The Simple Download Monitor WordPress plugin before 4.1.3 does not properly check the visibility of the content referenced by one of its shortcodes, allowing users with a role as low as Contributor to disclose the title and description of private, draft and other non-public posts.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":[],"vendors":[],"products":[],"references":[{"url":"https://wpscan.com/vulnerability/bf1275d7-f48b-4f30-90f1-024604aaf848/","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}