WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
directorist
Published
2022-11-28
Title
Directorist < 7.4.4 - Subscriber+ Sensitive Information Disclosure
Slug
directorist
Published
2023-05-10
Title
Directorist < 7.5.4 - Admin+ LFI
Slug
directorist
Published
2023-06-07
Title
Directorist < 7.5.5 - Subscriber+ Arbitrary User Password Reset to Privilege Escalation
Slug
directorist
Published
2023-06-07
Title
Directorist < 7.5.5 - Subscriber+ Insecure Direct Object Reference to Arbitrary Post Deletion
Slug
directorist
Published
2024-02-12
Title
Directorist < 7.8.5 - Missing Authorization to Unauthenticated Settings Change
Slug
directorist
Published
2024-04-29
Title
Directorist < 7.9.0 - Missing Authorization
Slug
directorist
Published
2025-01-31
Title
Directorist – AI-Powered WordPress Business Directory Plugin with Classified Ads Listings < 8.1 - Unauthenticated User Information Exposure
Slug
directorist
Published
2025-02-27
Title
Directorist: AI-Powered Business Directory < 8.2 - Privilege Escalation and Account Takeover
Slug
directorist
Published
2025-03-24
Title
Directorist < 8.3 - Missing Authorization to Unauthenticated Arbitrary Post Publishing
Slug
directorist
Published
2025-10-24
Title
Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings < 8.4.9 - Authenticated (Subscriber+) Arbitrary File Move
Slug
directorist
Published
2025-11-18
Title
Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings < 8.5.3 - Missing Authorization to Authenticated (Subscriber+) Data Export and Slug Update
Slug
directorist
Published
2025-12-15
Title
Directorist < 8.6.7 - Unauthenticated Open Redirect
Slug
directorist
Published
2026-01-27
Title
Directorist < 8.6.7 - Missing Authorization
Slug
directorist
Published
2026-02-22
Title
Directorist < 8.6.1 - Missing Authorization
Slug
directorist
Published
2026-07-09
Title
Directorist: AI-Powered Business Directory, Listings & Classified Ads < 8.8.3 - Authenticated (Subscriber+) PHP Object Injection
Slug
directorist
Published
2026-08-24
Title
Directorist 8.5 - 8.9.2 - Subscriber+ Arbitrary Image Move via REST v2 Listing Submission
Slug
directorist
Published
2026-09-02
Title
Directorist < 8.9 - Subscriber+ Arbitrary Post Meta Write via atbdp_post_attachment_upload
Slug
directorist
Published
2026-09-21
Title
Directorist 8.5 - 8.9.4 - Subscriber+ Order and Financial Record Disclosure via REST Orders Endpoint
Slug
directorist
Published
2026-09-21
Title
Directorist < 8.9.5 - Subscriber+ Cross-User Favorites Read and Write via REST Favorites Endpoint
Slug
directorist
Published
2026-09-21
Title
Directorist 3.1.0 - 8.9.4 - Subscriber+ Arbitrary Listing Deletion via remove_listing
Slug
directorist
Published
2026-09-21
Title
Directorist 8.1 - 8.9.4 - Unauthenticated Sensitive Data Disclosure via REST Users Endpoint
Slug
directorist
Published
2026-09-21
Title
Directorist < 8.9.5 - Subscriber+ SSRF via Avatar URL
Slug
directorist
Published
2026-09-21
Title
Directorist 8.9.1 - 8.9.4 - Subscriber+ Paid Order and Payment Record Forgery via REST Orders Endpoint
Slug
directorist
Published
2026-10-13
Title
Directorist: AI-Powered Business Directory, Listings & Classified Ads < 8.10.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Listing Deletion via 'listing_id' Parameter
Slug
directorist
Published
2026-10-13
Title
Directorist: AI-Powered Business Directory, Listings & Classified Ads < 8.10.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'phone' Listing Field