{"affected":[{"defaultStatus":"unknown","product":"AZEXO Store Locator","source":"CNA: WPScan","vendor":"Unknown","versions":[{"lessThanOrEqual":"1.4","status":"affected","version":"0","versionType":"semver"}]}],"cveId":"CVE-2026-115205","cwes":["CWE-862"],"description":"The AZEXO Store Locator WordPress plugin through 1.4 does not have a capability check or any authorization control when deleting a post, allowing any authenticated user, such as a subscriber, to delete arbitrary posts and pages.","epss":null,"exploits":[{"kind":"exploit","source":"CNA: WPScan","url":"https://wpscan.com/vulnerability/1b5ad120-2d39-49c9-89a1-f9385339cbcb/"}],"kev":null,"metrics":[],"modifiedAt":1793685622631,"publishedAt":1793685622631,"references":[{"source":"CNA: WPScan","tags":["exploit","vdb-entry","technical-description"],"url":"https://wpscan.com/vulnerability/1b5ad120-2d39-49c9-89a1-f9385339cbcb/"}],"remediation":[],"revision":"c736130d55266235fe3001387de0c966c6457395fbbb55b3a292706094919511","sources":[{"modifiedAt":1793685622631,"name":"CNA: WPScan","retrievedAt":1793686124555,"url":"https://www.cve.org/CVERecord?id=CVE-2026-115205"}],"ssvc":null,"status":"published","title":"AZEXO Store Locator <= 1.4 - Subscriber+ Arbitrary Post Deletion via azt_delete_item","updatedAt":1793686124555}