Beveiligingsadvies

CVE-2026-16592

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-09-15 06:00:08

Laatst bijgewerkt 2026-09-15 14:25:13

Toegewezen door WPScan

CVSS-score 2.7

Status PUBLISHED

Beschrijving

The WP Directory Kit WordPress plugin through 1.5.7 does not check authorization or listing visibility in one of its shortcodes, allowing users with a role as low as Contributor to disclose non-public listing content, including password-protected and hidden fields, belonging to other users.

← Alle CVE's bekijken Bekijk op cve.org ↗