{"id":"CVE-2026-118528","aliases":["EUVD-2026-118934","GHSA-rqcg-qxvw-p753"],"status":"published","title":"Directorist \u003c 8.11 - Subscriber+ Draft Listing Contact Information Disclosure via IDOR","description":"The Directorist: AI-Powered Business Directory, Listings \u0026 Classified Ads WordPress plugin before 8.11 does not validate that the requesting user owns the referenced listing before returning its metadata via an AJAX action, allowing authenticated attackers with Subscriber-level access and above to disclose another user's private and unpublished draft listing details, including contact information.","severity":{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-12","score":0.00197,"percentile":0.09488,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-639"],"published":"2026-11-07T06:00:25Z","modified":"2026-11-07T18:16:16Z","products":[{"vendor":"unknown","product":"directorist: ai-powered business directory, listings \u0026 classified ads"},{"vendor":"wpwax","product":"directorist: ai-powered business directory, listings \u0026 classified ads"}],"references":[{"url":"https://wpscan.com/vulnerability/c138ecf0-1d27-4250-accc-e6e7581b6e60/","tags":["exploit","vdb-entry","technical-description"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-118528"},{"url":"https://wpscan.com/vulnerability/c138ecf0-1d27-4250-accc-e6e7581b6e60"},{"url":"https://github.com/advisories/GHSA-rqcg-qxvw-p753"}],"sources":{"cve":[{"id":"CVE-2026-118528","title":"Directorist \u003c 8.11 - Subscriber+ Draft Listing Contact Information Disclosure via IDOR","description":"The Directorist: AI-Powered Business Directory, Listings \u0026 Classified Ads WordPress plugin before 8.11 does not validate that the requesting user owns the referenced listing before returning its metadata via an AJAX action, allowing authenticated attackers with Subscriber-level access and above to disclose another user's private and unpublished draft listing details, including contact information.","status":"published","published":"2026-11-07T06:00:25.178Z","modified":"2026-11-07T18:16:16.575Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-639"],"updated_at":"2026-11-07T19:35:26.456285Z"}],"euvd":[{"id":"EUVD-2026-118934","description":"The Directorist: AI-Powered Business Directory, Listings \u0026 Classified Ads WordPress plugin before 8.11 does not validate that the requesting user owns the referenced listing before returning its metadata via an AJAX action, allowing authenticated attackers with Subscriber-level access and above to disclose another user's private and unpublished draft listing details, including contact information.","status":"published","published":"2026-11-07T06:00:25Z","modified":"2026-11-07T18:16:16Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-07T19:10:17.704886Z"}],"ghsa":[{"id":"GHSA-rqcg-qxvw-p753","title":"The Directorist: AI-Powered Business Directory, Listings \u0026 Classified Ads WordPress plugin before...","description":"The Directorist: AI-Powered Business Directory, Listings \u0026 Classified Ads WordPress plugin before 8.11 does not validate that the requesting user owns the referenced listing before returning its metadata via an AJAX action, allowing authenticated attackers with Subscriber-level access and above to disclose another user's private and unpublished draft listing details, including contact information.","status":"published","published":"2026-11-07T06:31:23Z","modified":"2026-11-07T21:31:12Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"cwes":["CWE-639"],"updated_at":"2026-11-07T21:39:59.065692Z"}],"nvd":[{"id":"CVE-2026-118528","description":"The Directorist: AI-Powered Business Directory, Listings \u0026 Classified Ads WordPress plugin before 8.11 does not validate that the requesting user owns the referenced listing before returning its metadata via an AJAX action, allowing authenticated attackers with Subscriber-level access and above to disclose another user's private and unpublished draft listing details, including contact information.","status":"published","published":"2026-11-07T06:16:57.233Z","modified":"2026-11-10T16:28:46.51Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-639"],"updated_at":"2026-11-07T22:06:52.100138Z"}]}}