{"id":"CVE-2026-114444","aliases":["EUVD-2026-113724","GHSA-g4xh-fpq4-34j5"],"status":"published","title":"Security by CleanTalk \u003c 2.191 - Admin+ Sensitive Data Disclosure via FSWatcher File Viewer","description":"The Security Plugin, Firewall \u0026 Malware Scanner with Auto Removal WordPress plugin before 2.191 does not restrict its File System Watcher file viewer to Super Admins or to the files it legitimately tracks, allowing a non-super-admin administrator, including a subsite administrator on WordPress multisite, to read the contents of sensitive tracked files such as the main configuration file and disclose the site's authentication keys, salts and, on a standard install, database credentials.","severity":{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-12","score":0.00227,"percentile":0.13529,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-200"],"published":"2026-10-30T06:00:22Z","modified":"2026-10-30T17:49:38Z","products":[{"vendor":"unknown","product":"security plugin, firewall \u0026 malware scanner with auto removal"}],"references":[{"url":"https://wpscan.com/vulnerability/4f3e845e-2f30-4ea2-9a42-4adf01840d94/","tags":["exploit","vdb-entry","technical-description"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-114444"},{"url":"https://wpscan.com/vulnerability/4f3e845e-2f30-4ea2-9a42-4adf01840d94"},{"url":"https://github.com/advisories/GHSA-g4xh-fpq4-34j5"}],"sources":{"cve":[{"id":"CVE-2026-114444","title":"Security by CleanTalk \u003c 2.191 - Admin+ Sensitive Data Disclosure via FSWatcher File Viewer","description":"The Security Plugin, Firewall \u0026 Malware Scanner with Auto Removal WordPress plugin before 2.191 does not restrict its File System Watcher file viewer to Super Admins or to the files it legitimately tracks, allowing a non-super-admin administrator, including a subsite administrator on WordPress multisite, to read the contents of sensitive tracked files such as the main configuration file and disclose the site's authentication keys, salts and, on a standard install, database credentials.","status":"published","published":"2026-10-30T06:00:22.985Z","modified":"2026-10-30T13:26:47.723Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T13:39:50.160666Z"}],"euvd":[{"id":"EUVD-2026-113724","description":"The Security Plugin, Firewall \u0026 Malware Scanner with Auto Removal WordPress plugin before 2.191 does not restrict its File System Watcher file viewer to Super Admins or to the files it legitimately tracks, allowing a non-super-admin administrator, including a subsite administrator on WordPress multisite, to read the contents of sensitive tracked files such as the main configuration file and disclose the site's authentication keys, salts and, on a standard install, database credentials.","status":"published","published":"2026-10-30T06:00:22Z","modified":"2026-10-30T13:26:47Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T16:59:06.607412Z"}],"ghsa":[{"id":"GHSA-g4xh-fpq4-34j5","title":"The Security Plugin, Firewall \u0026 Malware Scanner with Auto Removal WordPress plugin before 2.191...","description":"The Security Plugin, Firewall \u0026 Malware Scanner with Auto Removal WordPress plugin before 2.191 does not restrict its File System Watcher file viewer to Super Admins or to the files it legitimately tracks, allowing a non-super-admin administrator, including a subsite administrator on WordPress multisite, to read the contents of sensitive tracked files such as the main configuration file and disclose the site's authentication keys, salts and, on a standard install, database credentials.","status":"published","published":"2026-10-30T06:32:02Z","modified":"2026-10-30T15:35:35Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T15:14:51.443103Z"}],"nvd":[{"id":"CVE-2026-114444","description":"The Security Plugin, Firewall \u0026 Malware Scanner with Auto Removal WordPress plugin before 2.191 does not restrict its File System Watcher file viewer to Super Admins or to the files it legitimately tracks, allowing a non-super-admin administrator, including a subsite administrator on WordPress multisite, to read the contents of sensitive tracked files such as the main configuration file and disclose the site's authentication keys, salts and, on a standard install, database credentials.","status":"published","published":"2026-10-30T06:16:45.7Z","modified":"2026-10-30T17:49:38.703Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:13:04.940026Z"}]}}