https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-09T14:56:13.341775+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-118532 fkie_cve-2026-118532 2026-11-09T14:56:13.342859+00:00

The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.11 does not verify ownership of attachment IDs supplied when updating a listing's images, allowing authenticated users with Subscriber-level access and above to permanently delete arbitrary media library attachments, including those uploaded by administrators, along with their files.

 https://db.gcve.eu/vuln/ghsa-2qqm-h6h2-8xxq GHSA-2qqm-h6h2-8xxq 2026-11-09T14:56:13.342912+00:00

The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.11 does not verify ownership of attachment IDs supplied when updating a listing's images, allowing authenticated users with Subscriber-level access and above to permanently delete arbitrary media library attachments, including those uploaded by administrators, along with their files.