CVE-2026-86789

The Connections Business Directory WordPress plugin, through version 10.4.67 , contains a vulnerability where visibility and moderation-status restrictions are not applied on specific REST API read endpoints . This flaw allows unauthenticated attackers to retrieve directory entries marked as priv...