CVE-2026-48200: WordPress Document Library Lite plugin <= 1.3.0 - Sensitive Data Exposure vulnerability

Q: Can an unauthenticated attacker exploit this remotely?

Yes. The vulnerability is rated with network attack vector, low attack complexity, no privileges required, and no user interaction required.

Q: What is the expected security impact?

The reported impact is limited to confidentiality, rated low. No integrity or availability impact is indicated.

Published Oct 29, 2026

Updated

Insertion of Sensitive Information Into Sent Data vulnerability in Barn2 Plugins Document Library Lite document-library-lite allows Retrieve Embedded Sensitive Data.This issue affects Document Library Lite: from n/a through 1.3.0.

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade WordPress Document Library Lite to a version that resolves this vulnerability.
Fixed in 1.3.1

Event History

Oct 29, 2026

CVE Published

via MITRE·03:04 PM

Data Sourced

via MITRE·03:04 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·04:18 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Can an unauthenticated attacker exploit this remotely?

Yes. The vulnerability is rated with network attack vector, low attack complexity, no privileges required, and no user interaction required.

What is the expected security impact?