Live › vulnerability › CVE-2026-48200
Document Library Lite, a WordPress plugin by Barn2, sends sensitive information embedded in its output. An attacker can retrieve that embedded sensitive data from the plugin's responses.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-29 16:25 UTC. All times on this page are UTC.
Sites running the Document Library Lite WordPress plugin at version 1.3.0 or earlier are in the affected range. The sources do not describe the exact data path or configuration needed to reach the embedded data, so the exposure conditions are unknown.
No product ranges from the sources yet.
1.3.0 of Document Library Lite; the exact fixed version is unknown from the sources.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Insertion of Sensitive Information Into Sent Data vulnerability in Barn2 Plugins Document Library Lite document-library-lite allows Retrieve Embedded Sensitive Data.This issue affects Document Library Lite: from n/a through 1.3.0.
This page as .md · .json · in your agent: get_signal("CVE-2026-48200")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.