Skip to content
OpenAdvisories
Medium · 5.3 CVE-2025-67985 EUVD-2025-203558GHSA-4xq4-24ch-xr3q

WordPress Document Library Lite plugin <= 1.1.7 - Insecure Direct Object References (IDOR) vulnerability

Published Dec 16, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Barn2 Plugins Product: Document Library Lite

Description

Authorization Bypass Through User-Controlled Key vulnerability in Barn2 Plugins Document Library Lite document-library-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Document Library Lite: from n/a through <= 1.1.7.

Affected products

VendorProductAffectedFixed
Barn2 Plugins Document Library Lite ≤ 1.1.7 —

References