https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T13:47:44.242539+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-77757 CVE-2026-77757 — Directorist 8.5 - 8.9.2 - Subscriber+ Arbitrary Image Move via REST v2 Listing Submission 2026-10-09T13:47:44.243704+00:00

Affected: Unknown Directorist: AI-Powered Business Directory, Listings & Classified Ads

The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.9.3 does not sanitize a user-supplied image reference before using it as the source of a file move, allowing users with a subscriber-level account to relocate arbitrary server-readable image files into a publicly accessible directory, and to delete them from their original location.