WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
direct-payments-wp
Published
2025-12-31
Title
Direct Payments WP <= 1.3.0 - Missing Authorization
Slug
direct-payments-wp
Published
2025-12-31
Title
Direct Payments WP <= 1.3.0 - Authenticated (Subscriber+) Sensitive Information Exposure
Slug
directdownload
Published
2017-01-17
Title
Direct Download for WooCommerce <= 1.15 - Unauthenticated LFI
Slug
directiq-wp
Published
2025-06-23
Title
DirectIQ Email Marketing <= 2.0 - Unauthenticated SQL Injection
Slug
directories-pro
Published
2020-12-12
Title
Directories Pro < 1.3.46 - Reflected Cross-Site Scripting
Slug
directories-pro
Published
2020-12-12
Title
Directories Pro < 1.3.46 - Authenticated Self-Reflected Cross-Site Scripting
Slug
directories-pro
Published
2026-08-10
Title
Directories Pro < 2.0.6 - Subscriber+ Privilege Escalation
Slug
directorist
Published
2021-11-16
Title
Directorist – Business Directory Plugin < 7.0.6.2 - CSRF to Remote File Upload
Slug
directorist
Published
2022-07-18
Title
Directorist - Business Directory Plugin < 7.2.3 - Admin+ Arbitrary File Upload
Slug
directorist
Published
2022-07-26
Title
Directorist < 7.3.0 - Subscriber+ Arbitrary E-mail Sending
Slug
directorist
Published
2022-08-10
Title
Directorist < 7.3.1 - Unauthenticated Email Address Disclosure
Slug
directorist
Published
2022-11-16
Title
Directorist < 7.4.2.2 - Subscriber+ Arbitrary User Password Update via IDOR
Slug
directorist
Published
2022-11-28
Title
Directorist < 7.4.4 - Subscriber+ Sensitive Information Disclosure
Slug
directorist
Published
2023-05-10
Title
Directorist < 7.5.4 - Admin+ LFI
Slug
directorist
Published
2023-06-07
Title
Directorist < 7.5.5 - Subscriber+ Arbitrary User Password Reset to Privilege Escalation
Slug
directorist
Published
2023-06-07
Title
Directorist < 7.5.5 - Subscriber+ Insecure Direct Object Reference to Arbitrary Post Deletion
Slug
directorist
Published
2024-02-12
Title
Directorist < 7.8.5 - Missing Authorization to Unauthenticated Settings Change
Slug
directorist
Published
2024-04-29
Title
Directorist < 7.9.0 - Missing Authorization
Slug
directorist
Published
2025-01-31
Title
Directorist – AI-Powered WordPress Business Directory Plugin with Classified Ads Listings < 8.1 - Unauthenticated User Information Exposure
Slug
directorist
Published
2025-02-27
Title
Directorist: AI-Powered Business Directory < 8.2 - Privilege Escalation and Account Takeover
Slug
directorist
Published
2025-03-24
Title
Directorist < 8.3 - Missing Authorization to Unauthenticated Arbitrary Post Publishing
Slug
directorist
Published
2025-10-24
Title
Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings < 8.4.9 - Authenticated (Subscriber+) Arbitrary File Move
Slug
directorist
Published
2025-11-18
Title
Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings < 8.5.3 - Missing Authorization to Authenticated (Subscriber+) Data Export and Slug Update
Slug
directorist
Published
2025-12-15
Title
Directorist < 8.6.7 - Unauthenticated Open Redirect
Slug
directorist
Published
2026-01-27
Title
Directorist < 8.6.7 - Missing Authorization