CVE-2026-114444
Security by CleanTalk < 2.191 - Admin+ Sensitive Data Disclosure via FSWatcher File Viewer
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The Security Plugin, Firewall & Malware Scanner with Auto Removal WordPress plugin before 2.191 does not restrict its File System Watcher file viewer to Super Admins or to the files it legitimately tracks, allowing a non-super-admin administrator, including a subsite administrator on WordPress multisite, to read the contents of sensitive tracked files such as the main configuration file and disclose the site's authentication keys, salts and, on a standard install, database credentials.
| Vendor | unknown |
| Product | security plugin, firewall & malware scanner with auto removal |
| Published | Oct 30, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown security plugin, firewall & malware scanner with auto removal
Be the first to know when new unknown vulnerabilities affecting unknown security plugin, firewall & malware scanner with auto removal are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / Security Plugin, Firewall & Malware Scanner with Auto Removal
0 < 2.191
References
Credits
Karthik WPScan