Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 08:35:29 +0000 CVE-2026-84098 — Directorist 3.1.0 - 8.9.4 - Subscriber+ Arbitrary Listing Deletion via remove_listing https://vulnerability.circl.lu/vuln/cve-2026-84098 <p><strong>Affected:</strong> Unknown Directorist: AI-Powered Business Directory, Listings &amp; Classified Ads</p> <p>The Directorist: AI-Powered Business Directory, Listings &amp; Classified Ads WordPress plugin before 8.9.5 does not properly verify a listing&#39;s ownership before deleting it, allowing authenticated attackers with Subscriber-level access and above to delete arbitrary listings, including ones belonging to other users.</p> <p>This is an incomplete fix of CVE-2023-1889 / CVE-2023-35052: a separate, unaddressed listing-deletion path allows the same impact, from at least version 3.1.0 through the current release.</p> <p><strong>Affected:</strong> Unknown Directorist: AI-Powered Business Directory, Listings &amp; Classified Ads</p> <p>The Directorist: AI-Powered Business Directory, Listings &amp; Classified Ads WordPress plugin before 8.9.5 does not properly verify a listing&#39;s ownership before deleting it, allowing authenticated attackers with Subscriber-level access and above to delete arbitrary listings, including ones belonging to other users.</p> <p>This is an incomplete fix of CVE-2023-1889 / CVE-2023-35052: a separate, unaddressed listing-deletion path allows the same impact, from at least version 3.1.0 through the current release.</p> https://vulnerability.circl.lu/vuln/cve-2026-84098