{"affected":[{"defaultStatus":"unaffected","product":"Directorist: AI-Powered Business Directory, Listings & Classified Ads","source":"CNA: WPScan","vendor":"Unknown","versions":[{"lessThan":"8.11","status":"affected","version":"0","versionType":"semver"}]}],"cveId":"CVE-2026-118534","cwes":["CWE-639"],"description":"The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.11 does not verify that the order targeted by its checkout payment-retry REST action belongs to the requesting user, allowing any authenticated user, such as a subscriber, to create payment-attempt records against other users' orders.","epss":null,"exploits":[{"kind":"exploit","source":"CNA: WPScan","url":"https://wpscan.com/vulnerability/1cc11436-a4ea-4a6e-b163-f37bcd8a3bd8/"}],"kev":null,"metrics":[],"modifiedAt":1794031226065,"publishedAt":1794031226065,"references":[{"source":"CNA: WPScan","tags":["exploit","vdb-entry","technical-description"],"url":"https://wpscan.com/vulnerability/1cc11436-a4ea-4a6e-b163-f37bcd8a3bd8/"}],"remediation":[],"revision":"7401d1485dde5c1cb4da780cd638c90edd74100a4fd9a48f7d6e681bc00a47fc","sources":[{"modifiedAt":1794031226065,"name":"CNA: WPScan","retrievedAt":1794031722091,"url":"https://www.cve.org/CVERecord?id=CVE-2026-118534"}],"ssvc":null,"status":"published","title":"Directorist < 8.11 - Subscriber+ Payment Retry on Other Users' Orders via IDOR","updatedAt":1794031722091}