Threats tagged 'ghsa-qvhr-hcf3-738r'

A vulnerability in The Directorist WordPress plugin versions before 8.11.1 allows users with Subscriber-level accounts and above to bypass listing moderation by changing their own listing status from pending to published. This flaw enables unauthorized publication of listings without administrator approval.