Plugin icon

DirectoryPress – Business Directory And Classified Ad Listing

directorypress

Vulnerabilities:

10

Last Updated:

March 4, 2026

Active Installs:

900

Published
Title
Fixed in
CVSS
Published
2026-04-15
Title
DirectoryPress – Business Directory And Classified Ad Listing < 3.6.27 - Unauthenticated SQL Injection via 'packages'
Fixed in
Fixed in 3.6.27
CVSS
7.5 (high)
Published
2026-03-23
Title
DirectoryPress < 3.6.27 - Unauthenticated Information Exposure
Fixed in
Fixed in 3.6.27
CVSS
5.3 (medium)
Published
2025-12-18
Title
DirectoryPress – Business Directory And Classified Ad Listing < 3.6.26 - Missing Authorization
Fixed in
Fixed in 3.6.26
CVSS
5.3 (medium)
Published
2025-12-18
Title
DirectoryPress – Business Directory And Classified Ad Listing < 3.6.27 - Missing Authorization
Fixed in
Fixed in 3.6.27
CVSS
4.3 (medium)
Published
2025-10-18
Title
DirectoryPress < 3.6.26 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 3.6.26
CVSS
6.4 (medium)
Published
2025-04-04
Title
DirectoryPress < 3.6.23 - Cross-Site Request Forgery
Fixed in
Fixed in 3.6.23
CVSS
4.3 (medium)
Published
2025-01-06
Title
DirectoryPress < 3.6.20 - Cross-Site Request Forgery to Cross-Site Scripting
Fixed in
Fixed in 3.6.20
CVSS
4.3 (medium)
Published
2024-12-23
Title
DirectoryPress < 3.6.17 - Authenticated (Author+) Stored Cross-Site Scripting
Fixed in
Fixed in 3.6.17
CVSS
5.4 (medium)
Published
2024-07-11
Title
DirectoryPress < 3.6.11 - Contributor+ SQL Injection
Fixed in
Fixed in 3.6.11
CVSS
7.2 (high)
Published
2024-04-16
Title
DirectoryPress – Business Directory And Classified Ad Listing < 3.6.8 - Reflected Cross-Site Scripting
Fixed in
Fixed in 3.6.8
CVSS
7.2 (high)