CVE-2025-11174
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk30th percentile - higher than 30% of all known CVEs
Summary
The Document Library Lite plugin for WordPress in versions up to and including 1.1.6 is vulnerable to Improper Authorization. The plugin exposes an unauthenticated AJAX action dll_load_posts that returns document data as JSON without nonce or capability checks. The handler accepts an attacker-controlled args array allowing retrieval of unpublished document titles and content.
Risk Assessment
An unauthenticated attacker can access confidential unpublished documents, potentially leading to information leakage. This may compromise data confidentiality and trust in the system.
Recommendation
Update the Document Library Lite plugin to a version later than 1.1.6 that fixes the vulnerability. Until updated, consider disabling the plugin or restricting access to the AJAX action.
Other vulnerabilities in Document Library Lite
Original NVD description (English source)
The Document Library Lite plugin for WordPress is vulnerable to Improper Authorization in all versions up to, and including, 1.1.6. This is due to the plugin exposing an unauthenticated AJAX action dll_load_posts which returns a JSON table of document data without performing nonce or capability checks. The handler accepts an attacker-controlled args array where the status option explicitly allows draft, pending, future, and any. This makes it possible for unauthenticated attackers to retrieve unpublished document titles and content via the AJAX endpoint.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS