{"affected":[{"defaultStatus":"unaffected","product":"Directorist: AI-Powered Business Directory, Listings & Classified Ads","source":"CNA: WPScan","vendor":"Unknown","versions":[{"lessThan":"8.11","status":"affected","version":"0","versionType":"semver"}]}],"cveId":"CVE-2026-118528","cwes":["CWE-639"],"description":"The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.11 does not validate that the requesting user owns the referenced listing before returning its metadata via an AJAX action, allowing authenticated attackers with Subscriber-level access and above to disclose another user's private and unpublished draft listing details, including contact information.","epss":null,"exploits":[{"kind":"exploit","source":"CNA: WPScan","url":"https://wpscan.com/vulnerability/c138ecf0-1d27-4250-accc-e6e7581b6e60/"}],"kev":null,"metrics":[],"modifiedAt":1794031225178,"publishedAt":1794031225178,"references":[{"source":"CNA: WPScan","tags":["exploit","vdb-entry","technical-description"],"url":"https://wpscan.com/vulnerability/c138ecf0-1d27-4250-accc-e6e7581b6e60/"}],"remediation":[],"revision":"7951316ce20eb2e37d5e413d0dc89dc66c45028645dcafb23ff1656205d9a2e8","sources":[{"modifiedAt":1794031225178,"name":"CNA: WPScan","retrievedAt":1794031716467,"url":"https://www.cve.org/CVERecord?id=CVE-2026-118528"}],"ssvc":null,"status":"published","title":"Directorist < 8.11 - Subscriber+ Draft Listing Contact Information Disclosure via IDOR","updatedAt":1794031716467}