WordPress Plugin Vulnerabilities

Directorist < 8.11 - Subscriber+ Other Users' Pending Listing Publication via Featured Listing Checkout

Description

The plugin does not verify that a user owns a listing before processing a featured-listing checkout for it, allowing any authenticated user, such as a subscriber, to publish and feature another user's pending listing when the featured listing fee is set to zero.

Proof of Concept

Affects Plugins

Plugin icon
directorist
Fixed in 8.11

References

CVE
CVE-2026-118529

Classification

Type
INCORRECT AUTHORISATION
OWASP top 10
A5: Broken Access Control
CWE
CWE-863
CVSS
3.1 (low)

Miscellaneous

Original Researcher
GivMeInJ
Submitter
GivMeInJ
Verified
Yes
WPVDB ID
1fd42aa7-97d2-48e9-9935-b413fadbad2f

Timeline

Publicly Published
2026-11-05 (about 2 days ago)
Added
2026-11-05 (about 1 day ago)
Last Updated
2026-11-05 (about 1 day ago)

Other

Published
Title
Published
2025-11-07
Title
Download Manager < 3.3.31 - Unauthenticated Cron Trigger due to Hardcoded Cron Key
Published
2026-11-03
Title
Import and export users and customers < 2.5.12 - Authenticated (Custom+) Privilege Escalation via Non-Atomic Cron Settings Save
Published
2026-01-09
Title
Blog2Social: Social Media Auto Post & Scheduler < 8.7.3 - Incorrect Authorization to Authenticated (Subscriber+) Sensitive Information Exposure
Published
2026-01-13
Title
Float Payment Gateway < 1.1.10 - Improper Authorization to Unauthenticated Order Status Manipulation
Published
2025-07-01
Title
Soumettre.fr <= 2.1.5 - Unauthenticated Soumettre Posts Creation/Modification/Deletion