Barn2 Plugins vulnerabilities and threats

CVE-2026-48200 is a vulnerability in Barn2 Plugins Document Library Lite (versions before 1.3.1) that allows insertion of sensitive information into sent data, potentially exposing embedded sensitive data. The issue affects versions up to 1.3.0 and has a medium severity with a CVSS score of 5.3.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Barn2 Plugins Document Library Lite document-library-lite allows DOM-Based XSS.This issue affects Document Library Lite: from n/a through <= 1.1.7.

Authorization Bypass Through User-Controlled Key vulnerability in Barn2 Plugins Document Library Lite document-library-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Document Library Lite: from n/a through <= 1.1.7.

Missing Authorization vulnerability in Barn2 Plugins Posts Table with Search & Sort posts-data-table allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Posts Table with Search & Sort: from n/a through <= 1.4.10.