https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 09 Nov 2026 15:45:09 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-118532 <p>The Directorist: AI-Powered Business Directory, Listings &amp; Classified Ads WordPress plugin before 8.11 does not verify ownership of attachment IDs supplied when updating a listing&#39;s images, allowing authenticated users with Subscriber-level access and above to permanently delete arbitrary media library attachments, including those uploaded by administrators, along with their files.</p> <p>The Directorist: AI-Powered Business Directory, Listings &amp; Classified Ads WordPress plugin before 8.11 does not verify ownership of attachment IDs supplied when updating a listing&#39;s images, allowing authenticated users with Subscriber-level access and above to permanently delete arbitrary media library attachments, including those uploaded by administrators, along with their files.</p> https://db.gcve.eu/vuln/fkie_cve-2026-118532 https://db.gcve.eu/vuln/ghsa-2qqm-h6h2-8xxq <p>The Directorist: AI-Powered Business Directory, Listings &amp; Classified Ads WordPress plugin before 8.11 does not verify ownership of attachment IDs supplied when updating a listing&#39;s images, allowing authenticated users with Subscriber-level access and above to permanently delete arbitrary media library attachments, including those uploaded by administrators, along with their files.</p> <p>The Directorist: AI-Powered Business Directory, Listings &amp; Classified Ads WordPress plugin before 8.11 does not verify ownership of attachment IDs supplied when updating a listing&#39;s images, allowing authenticated users with Subscriber-level access and above to permanently delete arbitrary media library attachments, including those uploaded by administrators, along with their files.</p> https://db.gcve.eu/vuln/ghsa-2qqm-h6h2-8xxq