CVE-2026-116613
validatedZero produced an exploit or a check.GHSA-fr3x-9wrh-9rp5 ↗EUVD-2026-111575 ↗
description
Animated Text Block – Add Typing and Looping Text Effects through version 1.2.6 may disclose content from published non-public post types. An authenticated user with Contributor-level access or greater can access that content through the plugin's shortcode.
mitigation
Disable the plugin or prevent untrusted users from using its shortcode until an updated release is available. Restrict Contributor and higher roles to trusted accounts, and review published non-public custom post content for unintended exposure.
outcome
Upstream: a detection for this already ships elsewhere, so we didn't generate a new one. The credit goes to whoever did.
source signals
Public signals that triggered or updated the pipeline. These are inputs for the deltas above.
- 2026-10-28 03:42Zcve_org: trigger signal, started the run
- 2026-10-28 04:04Z
this entry in the feed
GET /api/v1/feed/CVE-2026-116613
{ "etk_id": "ETK-2026-2829", "cve_id": "CVE-2026-116613", "display_id": "CVE-2026-116613", "ghsa_id": "GHSA-fr3x-9wrh-9rp5", "euvd_id": "EUVD-2026-111575", "status": "published", "anchor_state": "anchored", "title": "Missing authorization in Animated Text Block shortcode", "summary": "Animated Text Block – Add Typing and Looping Text Effects through version 1.2.6 may disclose content from published non-public post types. An authenticated user with Contributor-level access or greater can access that content through the plugin's shortcode.", "mitigation": "Disable the plugin or prevent untrusted users from using its shortcode until an updated release is available. Restrict Contributor and higher roles to trusted accounts, and review published non-public custom post content for unintended exposure.", "vendor": "bplugins", "product": "Animated Text Block – Add Typing and Looping Text Effects", "affected": [ { "affected_notes": [], "affected_ranges": [ ">= 0, <= 1.2.6" ], "ecosystem": null, "fixed_versions": [], "package_name": "Animated Text Block – Add Typing and Looping Text Effects", "purl": null } ], "cwes": [ 862 ], "cvss_score": 7.5, "cvss_src": "cna_vendor", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "epss_score": null, "epss_percentile": null, "epss_asof": null, "automation": "deterministic", "check": true, "check_confidence_basis": "upstream", "exploit": false, "pipeline_minutes": 0.11656805, "t0_at": "2026-10-28T03:42:54.035000+00:00", "signals": { "check": { "at": "2026-10-28T04:04:20.970472+00:00", "days": 0.014895086481481482, "is_lower_bound": false, "measured_at": "2026-10-28T03:42:54.035000+00:00", "url": null }, "trigger_signal": { "at": "2026-10-28T03:42:54.035000+00:00", "days": 0, "is_lower_bound": false, "measured_at": "2026-10-28T03:42:54.035000+00:00", "url": "https://www.cve.org/CVERecord?id=CVE-2026-116613" } } }
published 2026-10-28 04:04Z
last change 2026-10-28 06:14Z
Need the technical details behind an entry?
Every entry here shows what we attempted and when. The technical details, the generated exploit that fired it and the evidence behind the verdict are not public. Tell us about your use case and we’ll get back to you about extended API access.