{"id":"CVE-2026-115205","published":"2026-11-03T06:17:37.767","lastModified":"2026-11-03T06:17:37.767","description":"The AZEXO Store Locator WordPress plugin through 1.4 does not have a capability check or any authorization control when deleting a post, allowing any authenticated user, such as a subscriber, to delete arbitrary posts and pages.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":[],"vendors":[],"products":[],"references":[{"url":"https://wpscan.com/vulnerability/1b5ad120-2d39-49c9-89a1-f9385339cbcb/","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}