What is GHSA-gxjq-4vr8-3jm2?

GHSA-gxjq-4vr8-3jm2 is a security advisory published by GitHub Security Advisories with Low severity. The Directorist: AI-Powered Business Directory, Listings \u0026 Classified Ads WordPress plugin before...

Which CVE IDs does GHSA-gxjq-4vr8-3jm2 cover?

GHSA-gxjq-4vr8-3jm2 covers the following CVE IDs: CVE-2026-84066. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-gxjq-4vr8-3jm2?

GHSA-gxjq-4vr8-3jm2 has a CVSS v3 base score of 3.1, published by GitHub Security Advisories.

GHSA-gxjq-4vr8-3jm2LowCVSS 3.1

The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before...

Vendor

GitHub Security Advisories

Published

September 4, 2026

Last Modified

September 4, 2026

🔗 CVE IDs covered (1)

CVE-2026-84066 →

📋 Description

The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.9 does not verify that the requesting user owns the post being modified before writing uploaded file references to its metadata, allowing users with the subscriber role and above to overwrite image metadata on posts belonging to other users.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-84066
https://wpscan.com/vulnerability/99d990ce-aef3-404d-8ce0-803215fbf0bb
https://github.com/advisories/GHSA-gxjq-4vr8-3jm2