Lucene search
+L

2 matches found

Cvelist
Cvelist
added 2026/09/23 6:00 a.m.8 views

CVE-2026-84026 Directorist 8.1 - 8.9.4 - Unauthenticated Sensitive Data Disclosure via REST Users Endpoint

The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.9.5 does not restrict access to a REST endpoint that returns user records, allowing unauthenticated attackers to read registered users' private contact details...

0.00199EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/23 6:00 a.m.7 views

CVE-2026-84026

The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.9.5 does not restrict access to a REST endpoint that returns user records, allowing unauthenticated attackers to read registered users' private contact details...

5.8AI score0.00199EPSS
SaveExploits0References1
Rows per page
Query Builder