Now officially on WordPress.org

CVE Database / CVE-2025-67986

CVE · Medium

CVE-2025-67986 — Document Library Lite [document-library-lite] < 1.2.0

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2025-67986 Document Library Lite [document-library-lite] < 1.2.0 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Medium 5.9 < 1.2.0 1.2.0 2025-12-15 —

CVE-2025-67986

The Document Library Lite plugin for WordPress contains a security flaw in versions 1.1.7 and earlier, allowing malicious users with admin-level access to inject unauthorized code into certain pages that will run when visited by other users. This vulnerability only affects specific types of installations where the unfiltered HTML feature is disabled or multi-site configurations are used.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.

Run a free scan Get the plugin (free)

See the full security page for this plugin Browse the CVE database Browse all security findings