https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-09T19:40:49.016124+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-118530 CVE-2026-118530 — Directorist < 8.11 - Admin+ Cross-Site Account Lockout via Email Verification Bulk Action 2026-11-09T19:40:49.028035+00:00

Affected: Unknown Directorist: AI-Powered Business Directory, Listings & Classified Ads

The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.11 does not check that the acting user may edit each targeted user when handling an email-verification bulk action on multisite, allowing an Administrator of one site on the network to lock out users of other sites, including the network Super Administrator, until they re-verify their email.