admin/cve
1
0 Fork 0
mirror of https://github.com/0xMarcio/cve.git synced 2026-10-27 16:51:03 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
main
cve/cves/2026/CVE-2026-18232.md
T
CVE-BOT bfe6c649c9 Update CVE PoCs 2026-09-15
2026-09-15 07:54:39 +00:00

893 B
Raw Permalink Blame History

CVE-2026-18232

WP Directory Kit <= 1.5.7 - Unauthenticated Unpublished Listing Disclosure via map_infowindow

Description

The WP Directory Kit WordPress plugin through 1.5.7 does not check the status or ownership of a listing before returning its content through one of its public AJAX actions, allowing unauthenticated attackers to read draft and unapproved listings belonging to other users.

POC

Reference

Github

No PoCs found on GitHub currently.

Reference in new issue View Git Blame Copy Permalink