CVE-2026-17092 | wpwax Directorist AI-Powered Business Directory, Listings & Classified Ads Plugin wp_localize_script authorization

October 14, 2026 Yanac

A vulnerability marked as problematic has been reported in wpwax Directorist AI-Powered Business Directory, Listings & Classified Ads Plugin up to 8.10.2.1 on WordPress. The impacted element is the function wp_localize_script. This manipulation of the argument directorist_nonce/atbdp_nonce_js causes authorization bypass.

This vulnerability is registered as CVE-2026-17092. Remote exploitation of the attack is possible. No exploit is available.VulDB Recent EntriesRead More