UNKNOWNCVSS not yet scoredVulnerability
CVE-2026-113481
The Media Library Assistant WordPress plugin before 3.44 does not check that the requesting user is allowed to view a post before disclosing which taxonomy terms are assigned to it, allowing any authenticated user, such as a subscriber, to learn the term assignments of private attachments and posts.
Properties
- Last source
- NVD
- Nvd fetched at
- 2026-11-01T08:29:47.771607+00:00
- Cve id
- CVE-2026-113481
- First seen by Signal
- 2026-11-01T08:25:06+00:00
- Retrieved at
- 2026-11-01T08:30:51+00:00
- Published at
- 2026-11-01T05:18:57.110
- Last modified
- 2026-11-01T05:18:57.110
Explore deeper with Ninja Signal's threat intelligence graph