{"affected":[{"defaultStatus":"unaffected","product":"Simple Download Monitor","source":"CNA: WPScan","vendor":"Unknown","versions":[{"lessThan":"4.1.3","status":"affected","version":"0","versionType":"semver"}]}],"cveId":"CVE-2026-118637","cwes":["CWE-200"],"description":"The Simple Download Monitor WordPress plugin before 4.1.3 does not properly check the visibility of the content referenced by one of its shortcodes, allowing users with a role as low as Contributor to disclose the title and description of private, draft and other non-public posts.","epss":null,"exploits":[{"kind":"exploit","source":"CNA: WPScan","url":"https://wpscan.com/vulnerability/bf1275d7-f48b-4f30-90f1-024604aaf848/"}],"kev":null,"metrics":[],"modifiedAt":1793772028607,"publishedAt":1793772028607,"references":[{"source":"CNA: WPScan","tags":["exploit","vdb-entry","technical-description"],"url":"https://wpscan.com/vulnerability/bf1275d7-f48b-4f30-90f1-024604aaf848/"}],"remediation":[],"revision":"98536da5bd29730da6e4822ee5d4eaa8348032e8e4241793d99f2437f4529039","sources":[{"modifiedAt":1793772028607,"name":"CNA: WPScan","retrievedAt":1793776147903,"url":"https://www.cve.org/CVERecord?id=CVE-2026-118637"}],"ssvc":null,"status":"published","title":"Simple Download Monitor < 4.1.3 - Contributor+ Private Download Item Title and Description Disclosure via [sdm_show_download_info] Shortcode","updatedAt":1793776147903}