UpHeron
All vulnerabilities

WordPress plugins

CVE-2026-17092

Directorist: AI-Powered Business Directory, Listings & Classified Ads <= 8.10.2.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Listing Deletion via 'listing_id' Parameter

Severity
High 8.1
Published
14 Oct 2026
Last changed
14 Oct 2026
Added to UpHeron
14 Oct 2026
Sources
CVE Program

Affected software

SoftwareAffected versions
Directorist (WordPress plugin)WordPress plugins · wp-plugin:directorist
  • Every version up to 8.10.2.1

References

  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-17092