WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
directorist
Published
2025-02-27
Title
Directorist: AI-Powered Business Directory < 8.2 - Privilege Escalation and Account Takeover
Slug
directorist
Published
2025-03-24
Title
Directorist < 8.3 - Missing Authorization to Unauthenticated Arbitrary Post Publishing
Slug
directorist
Published
2025-10-24
Title
Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings < 8.4.9 - Authenticated (Subscriber+) Arbitrary File Move
Slug
directorist
Published
2025-11-18
Title
Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings < 8.5.3 - Missing Authorization to Authenticated (Subscriber+) Data Export and Slug Update
Slug
directorist
Published
2025-12-15
Title
Directorist <= 8.5.6 - Unauthenticated Open Redirect
Slug
directorist
Published
2026-01-27
Title
Directorist <= 8.5.8 - Missing Authorization
Slug
directorist-booking
Published
2026-01-20
Title
Directorist Booking <= 2.4.1 - Unauthenticated SQL Injection
Slug
directorist-social-login
Published
2026-01-20
Title
Directorist Social Login <= 2.1.1 - Unauthenticated Privilege Escalation
Slug
directory-pro
Published
2023-03-06
Title
Multiple e-plugins - Subscriber+ Privilege Escalation
Slug
directory-pro
Published
2025-09-22
Title
Directory Pro <= 2.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
directory-pro
Published
2025-08-15
Title
Directory Pro <= 2.5.5 - Reflected Cross-Site Scripting
Slug
directory-pro
Published
2025-12-12
Title
Directory Pro <= 2.5.6 - Missing Authorization
Slug
directorypress
Published
2024-04-16
Title
DirectoryPress – Business Directory And Classified Ad Listing < 3.6.8 - Reflected Cross-Site Scripting
Slug
directorypress
Published
2024-07-11
Title
DirectoryPress < 3.6.11 - Contributor+ SQL Injection
Slug
directorypress
Published
2024-12-23
Title
DirectoryPress < 3.6.17 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
directorypress
Published
2025-01-06
Title
DirectoryPress < 3.6.20 - Cross-Site Request Forgery to Cross-Site Scripting
Slug
directorypress
Published
2025-04-04
Title
DirectoryPress < 3.6.23 - Cross-Site Request Forgery
Slug
directorypress
Published
2025-10-18
Title
DirectoryPress < 3.6.26 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
directorypress
Published
2025-12-18
Title
DirectoryPress – Business Directory And Classified Ad Listing <= 3.6.26 - Missing Authorization
Slug
directorypress-frontend
Published
2025-02-14
Title
DirectoryPress Frontend < 2.8.0 - Cross-Site Request Forgery to Listing Status Update
Slug
dirtysuds-embed-pdf
Published
2023-02-02
Title
Embed PDF <= 1.0.6 - Contributor+ Stored XSS via Shortcode
Slug
disable-admin-notices
Published
2024-11-13
Title
Disable Admin Notices individually < 1.4.1 - Cross-Site Request Forgery
Slug
disable-auto-updates
Published
2025-02-18
Title
Disable Auto Updates <= 1.4 - Cross-Site Request Forgery to Auto-update Disable
Slug
disable-comments
Published
2014-08-01
Title
Disable Comments 1.0.3 - disable_comments_settings.php Comment Status Manipulation CSRF
Slug
disable-comments-wpz
Published
2024-04-12
Title
Disable Comments | WPZest <= 1.51 - Authenticated (Administrator+) SQL Injection