Document Library Lite
Document Library Lite creates searchable document libraries for organizing and displaying downloadable files in WordPress.
Document Library Lite (document-library-lite) is a WordPress plugin with 4 published CVE records in this archive. The latest tracked vulnerability was published Oct 29, 2026; the highest published CVSS base score is 5.9.
document-library-liteCVE-2026-48200: Document Library Lite: Sensitive information exposure
Insertion of Sensitive Information Into Sent Data vulnerability in Barn2 Plugins Document Library Lite document-library-lite allows Retrieve Embedded Sensitive Data.This issue affects Document Library Lite: from n/a through 1.3.0. The CNA vector indicates that no prior authentication is required. The export does not disclose the endpoint, input parameter, vulnerable function or detailed input-processing path. No additional exploit mechanics are inferred. The issue can disclose data to an unauthorized recipient, but the precise data and recipient are not specified. The structured affected range is <= 1.3.0.
| Safe version |
|
||
|---|---|---|---|
| Oct 29, 2026 |
CVE-2026-48200
Document Library Lite: Sensitive information exposure
Insertion of Sensitive Information Into Sent Data vulnerability in Barn2 Plugins Document Library Lite document-library-lite allows Retrieve Embedded Sensitive Data.This issue affects Document Library Lite: from n/a through 1.3.0. The CNA vector indicates that no prior authentication is required. The export does not disclose the endpoint, input parameter, vulnerable function or detailed input-processing path. No additional exploit mechanics are inferred. The issue can disclose data to an unauthorized recipient, but the precise data and recipient are not specified. The structured affected range is <= 1.3.0.
|
1.3.1 |
CVE5.3
|
| Dec 16, 2025 |
CVE-2025-67986
Document Library Lite: Cross-site scripting
Document Library Lite is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE5.9
|
| Dec 16, 2025 |
CVE-2025-67985
Document Library Lite: A security weakness
Document Library Lite is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE5.3
|
| Nov 01, 2025 |
CVE-2025-11174
Document Library Lite: A security weakness
Document Library Lite is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE5.3
|