CVE-2026-115205

UNKNOWN 0.0

AZEXO Store Locator <= 1.4 - Subscriber+ Arbitrary Post Deletion via azt_delete_item

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

The AZEXO Store Locator WordPress plugin through 1.4 does not have a capability check or any authorization control when deleting a post, allowing any authenticated user, such as a subscriber, to delete arbitrary posts and pages.

Vendor	unknown
Product	azexo store locator
Published	Nov 3, 2026

Stay Ahead of the Next One

Get instant alerts for unknown azexo store locator

Be the first to know when new unknown vulnerabilities affecting unknown azexo store locator are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Unknown / AZEXO Store Locator

0 ≤ 1.4

References

NVD ↗ CVE.org ↗ EPSS Data ↗

wpscan.com: https://wpscan.com/vulnerability/1b5ad120-2d39-49c9-89a1-f9385339cbcb/

Credits

Nguyen Huu Do WPScan