CVE-2026-84066

The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin (versions before 8.9 ) contains an arbitrary post meta write vulnerability. The application fails to verify if a requesting user owns a post before writing uploaded file references to its metadata via the a...