CVE-2026-118637
Simple Download Monitor < 4.1.3 - Contributor+ Private Download Item Title and Description Disclosure via [sdm_show_download_info] Shortcode
Description
The Simple Download Monitor WordPress plugin before 4.1.3 does not properly check the visibility of the content referenced by one of its shortcodes, allowing users with a role as low as Contributor to disclose the title and description of private, draft and other non-public posts.
Affected products
| Vendor | Product | Versions |
|---|---|---|
| n/a | Simple Download Monitor | <4.1.3 |
References
External links from the record. They lead to third-party sites.