CVE-2026-16988

The GeoDirectory WordPress plugin (versions before 2.8.169 ) is vulnerable to an information disclosure flaw because it fails to perform authorization checks when returning map marker data for a single requested listing via the markers REST endpoint . This allows unauthenticated users to access a...