Directorist Ai-powered Business Directory (Unknown) - vulnerabilities (CVEs)
8 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2026-09-23. Vendor: Unknown.
CVEs of Directorist Ai-powered Business Directory
- CVE-2026-84150 - CVSS 5.4 (medium), 2026-09-23: The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.9.5 does not verify that the target user of a REST route…
- CVE-2026-84026 - CVSS 5.3 (medium), 2026-09-23: The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.9.5 does not restrict access to a REST endpoint that…
- CVE-2026-84098 - CVSS 6.5 (medium), 2026-09-23: The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.9.5 does not properly verify a listing's ownership before…
- CVE-2026-84046 - CVSS 5 (medium), 2026-09-23: The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.9.5 does not validate a user-supplied URL before fetching…
- CVE-2026-84027 - CVSS 4.3 (medium), 2026-09-23: The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.9.5 does not check user capabilities when creating orders…
- CVE-2026-77766 - CVSS 4.3 (medium), 2026-09-23: The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.9.5 does not scope one of its REST collection endpoints to…
- CVE-2026-84066 - CVSS 3.1 (low), 2026-09-04: The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.9 does not verify that the requesting user owns the post…
- CVE-2026-77757 - CVSS 5.4 (medium), 2026-08-26: The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.9.3 does not sanitize a user-supplied image reference…
