CVE-2026-115205 AZEXO Store Locator <= 1.4 - Subscriber+ Arbitrary Post Deletion via azt_delete_item

The AZEXO Store Locator WordPress plugin through 1.4 does not have a capability check or any authorization control when deleting a post, allowing any authenticated user, such as a subscriber, to delete arbitrary posts and pages...

CVE-2026-115205

The AZEXO Store Locator WordPress plugin (version 1.4 and below ) is vulnerable to arbitrary post deletion . The vulnerability exists because the azt_delete_item function lacks sufficient capability checks or authorization controls. This allows any authenticated user, including those with Subscri...