Sensitive Information Exposure in Animated Text Block Plugin for WordPress

CVE-2026-116613

What is CVE-2026-116613?

The Animated Text Block plugin for WordPress is susceptible to a Sensitive Information Exposure risk caused by improper handling of the 'animated-text' shortcode. In versions 1.2.6 and earlier, the atb_shortcode_handler() function does not enforce necessary capability checks or verify the post type visibility, allowing authenticated attackers with Contributor-level access or higher to retrieve and view the contents of any published post, including non-public custom post types. This oversight leads to potential disclosure of sensitive information that should normally be restricted from unauthorized access.

References