CVE-2026-84066

Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin versions before 8.9 contain an authorization flaw in the atbdp_post_attachment_upload handler. The plugin fails to verify that the requesting user owns the post being modified before writing uploaded file refer...