https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 23:34:45 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2026-84098 <p>The Directorist: AI-Powered Business Directory, Listings &amp; Classified Ads WordPress plugin before 8.9.5 does not properly verify a listing&#39;s ownership before deleting it, allowing authenticated attackers with Subscriber-level access and above to delete arbitrary listings, including ones belonging to other users.</p> <p>This is an incomplete fix of CVE-2023-1889 / CVE-2023-35052: a separate, unaddressed listing-deletion path allows the same impact, from at least version 3.1.0 through the current release.</p> <p>The Directorist: AI-Powered Business Directory, Listings &amp; Classified Ads WordPress plugin before 8.9.5 does not properly verify a listing&#39;s ownership before deleting it, allowing authenticated attackers with Subscriber-level access and above to delete arbitrary listings, including ones belonging to other users.</p> <p>This is an incomplete fix of CVE-2023-1889 / CVE-2023-35052: a separate, unaddressed listing-deletion path allows the same impact, from at least version 3.1.0 through the current release.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-84098 https://vulnerability.circl.lu/vuln/ghsa-7mc4-vjfr-47h6 <p>The Directorist: AI-Powered Business Directory, Listings &amp; Classified Ads WordPress plugin before 8.9.5 does not properly verify a listing&#39;s ownership before deleting it, allowing authenticated attackers with Subscriber-level access and above to delete arbitrary listings, including ones belonging to other users.</p> <p>This is an incomplete fix of CVE-2023-1889 / CVE-2023-35052: a separate, unaddressed listing-deletion path allows the same impact, from at least version 3.1.0 through the current release.</p> <p>The Directorist: AI-Powered Business Directory, Listings &amp; Classified Ads WordPress plugin before 8.9.5 does not properly verify a listing&#39;s ownership before deleting it, allowing authenticated attackers with Subscriber-level access and above to delete arbitrary listings, including ones belonging to other users.</p> <p>This is an incomplete fix of CVE-2023-1889 / CVE-2023-35052: a separate, unaddressed listing-deletion path allows the same impact, from at least version 3.1.0 through the current release.</p> https://vulnerability.circl.lu/vuln/ghsa-7mc4-vjfr-47h6