UNKNOWN NVD

CVE-2026-18232

The WP Directory Kit WordPress plugin through 1.5.7 does not check the status or ownership of a listing before returning its content through one of its public A

The WP Directory Kit WordPress plugin through 1.5.7 does not check the status or ownership of a listing before returning its content through one of its public AJAX actions, allowing unauthenticated attackers to read draft and unapproved listings belonging to other users.

References

https://wpscan.com/vulnerability/69d10ee3-0d36-47d1-b5bf-88b8516d99f4/

Published: 2026-09-15 · Source: NVD · Feed updated: 2026-09-15

This unknown severity vulnerability was published on 2026-09-15 via NVD.

vulnfeed aggregates 13505 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.