https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 10:16:56 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-84150 <p>The Directorist: AI-Powered Business Directory, Listings &amp; Classified Ads WordPress plugin before 8.9.5 does not verify that the target user of a REST route matches the authenticated caller before reading and modifying that user&#39;s saved favorites, allowing any authenticated user with subscriber-level access to view and alter another user&#39;s favorites.</p> <p>The Directorist: AI-Powered Business Directory, Listings &amp; Classified Ads WordPress plugin before 8.9.5 does not verify that the target user of a REST route matches the authenticated caller before reading and modifying that user&#39;s saved favorites, allowing any authenticated user with subscriber-level access to view and alter another user&#39;s favorites.</p> https://db.gcve.eu/vuln/fkie_cve-2026-84150 https://db.gcve.eu/vuln/ghsa-qm62-48pg-2f99 <p>The Directorist: AI-Powered Business Directory, Listings &amp; Classified Ads WordPress plugin before 8.9.5 does not verify that the target user of a REST route matches the authenticated caller before reading and modifying that user&#39;s saved favorites, allowing any authenticated user with subscriber-level access to view and alter another user&#39;s favorites.</p> <p>The Directorist: AI-Powered Business Directory, Listings &amp; Classified Ads WordPress plugin before 8.9.5 does not verify that the target user of a REST route matches the authenticated caller before reading and modifying that user&#39;s saved favorites, allowing any authenticated user with subscriber-level access to view and alter another user&#39;s favorites.</p> https://db.gcve.eu/vuln/ghsa-qm62-48pg-2f99