CyberRota Analysis
AI-GeneratedListingPro versions up to 2.9.10 are susceptible to a broken access control vulnerability, which could allow unauthorized users to access restricted subscriber information. This issue poses a medium risk, potentially leading to data exposure or manipulation. Organizations using affected versions should prioritize remediation to safeguard sensitive subscriber data.
CVE
CVE-2026-65478
Severity
MEDIUM
CVSS
5.4
EPSS
0.22%
Original NVD Description
Subscriber Broken Access Control in ListingPro <= 2.9.10 versions.