https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 10 Nov 2026 01:27:20 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-114444 <p>The Security Plugin, Firewall &amp; Malware Scanner with Auto Removal WordPress plugin before 2.191 does not restrict its File System Watcher file viewer to Super Admins or to the files it legitimately tracks, allowing a non-super-admin administrator, including a subsite administrator on WordPress multisite, to read the contents of sensitive tracked files such as the main configuration file and disclose the site&#39;s authentication keys, salts and, on a standard install, database credentials.</p> <p>The Security Plugin, Firewall &amp; Malware Scanner with Auto Removal WordPress plugin before 2.191 does not restrict its File System Watcher file viewer to Super Admins or to the files it legitimately tracks, allowing a non-super-admin administrator, including a subsite administrator on WordPress multisite, to read the contents of sensitive tracked files such as the main configuration file and disclose the site&#39;s authentication keys, salts and, on a standard install, database credentials.</p> https://db.gcve.eu/vuln/fkie_cve-2026-114444 https://db.gcve.eu/vuln/ghsa-g4xh-fpq4-34j5 <p>The Security Plugin, Firewall &amp; Malware Scanner with Auto Removal WordPress plugin before 2.191 does not restrict its File System Watcher file viewer to Super Admins or to the files it legitimately tracks, allowing a non-super-admin administrator, including a subsite administrator on WordPress multisite, to read the contents of sensitive tracked files such as the main configuration file and disclose the site&#39;s authentication keys, salts and, on a standard install, database credentials.</p> <p>The Security Plugin, Firewall &amp; Malware Scanner with Auto Removal WordPress plugin before 2.191 does not restrict its File System Watcher file viewer to Super Admins or to the files it legitimately tracks, allowing a non-super-admin administrator, including a subsite administrator on WordPress multisite, to read the contents of sensitive tracked files such as the main configuration file and disclose the site&#39;s authentication keys, salts and, on a standard install, database credentials.</p> https://db.gcve.eu/vuln/ghsa-g4xh-fpq4-34j5