The Media Library Assistant WordPress plugin before 3.44 does not check that the requesting user is allowed to view a post before disclosing which taxonomy terms are assigned to it, allowing any authenticated user, such as a subscriber, to learn the term assignments of private attachments and posts.
CVE-2026-113481
NONE
Updated Nov 01, 2026
WordPress
CVE Details
CVE ID
CVE-2026-113481
Published Date
Nov 01, 2026
Vendor
WordPress
Severity
NONE
Impact
Minimal impact
Source
View Advisory