CVE-2026-11781

Beschreibung

The Adminify WordPress plugin before 4.2.10 does not perform per-user read-capability checks on the results returned by one of its administration search features, allowing users with a low-privilege role (Contributor) to disclose non-public content that WordPress would not otherwise expose to them, such as other authors- unpublished post titles, pending comment content, the site-s Adminify WordPress plugin before 4.2.10 inventory, and user account names.