Threats tagged 'ghsa-66q8-qh5w-5952'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	–	CVE-2026-118534The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.11 does not verify Medium2026-11-07GCVE DatabaseCVE-2026-118534 The Directorist WordPress plugin versions before 8.11 have a vulnerability where the checkout payment-retry REST action does not verify that the order belongs to the requesting user. This flaw allows any authenticated user, including subscribers, to create payment-attempt records on orders owned by other users. Report on CVE-2026-118534 Vulnerability #ghsa-66q8-qh5w-5952	GCVE Database	2026-11-07

Page 1 of 1