Plugin icon

Name Directory

name-directory

Vulnerabilities:

11

Last Updated:

April 17, 2026

Active Installs:

3000

Published
Title
Fixed in
CVSS
Published
2026-03-10
Title
Name Directory < 1.33.0 - Unauthenticated Stored Cross-Site Scripting via 'name_directory_name'
Fixed in
Fixed in 1.33.0
CVSS
7.2 (high)
Published
2026-02-09
Title
Name Directory < 1.32.1 - Unauthenticated Stored Cross-Site Scripting via Double HTML-Entity Encoding in Submission Form
Fixed in
Fixed in 1.32.1
CVSS
7.2 (high)
Published
2026-01-13
Title
Name Directory < 1.31.0 - Unauthenticated Stored Cross-Site Scripting via Multiple Parameters
Fixed in
Fixed in 1.31.0
CVSS
7.2 (high)
Published
2025-04-17
Title
Name Directory < 1.30.1 - Missing Authorization
Fixed in
Fixed in 1.30.1
CVSS
4.3 (medium)
Published
2024-08-26
Title
Name Directory < 1.29.1 - Reflected Cross-Site Scripting
Fixed in
Fixed in 1.29.1
CVSS
6.1 (medium)
Published
2023-01-23
Title
Name Directory <= 1.27.1 - Settings Update via CSRF
Fixed in
Fixed in 1.27.2
CVSS
4.3 (medium)
Published
2022-07-18
Title
Name Directory < 1.25.5 - Stored Cross-Site Scripting via CSRF
Fixed in
Fixed in 1.25.5
CVSS
6.1 (medium)
Published
2022-07-04
Title
Name Directory < 1.25.3 - Reflected Cross-Site Scripting
Fixed in
Fixed in 1.25.3
CVSS
6.1 (medium)
Published
2022-07-04
Title
Name Directory < 1.25.4 - Arbitrary Directory/Name Deletion via CSRF
Fixed in
Fixed in 1.25.4
CVSS
4.3 (medium)
Published
2022-07-04
Title
Name Directory < 1.25.4 - Stored Cross-Site Scripting via CSRF
Fixed in
Fixed in 1.25.4
CVSS
6.1 (medium)
Published
2021-02-05
Title
Name Directory < 1.18 - Cross-Site Request Forgery (CSRF)
Fixed in
Fixed in 1.18
CVSS
4.3 (medium)