Directorist (Wpwax) - vulnerabilities (CVEs)
13 CVEs, 0 in the last 30 days, 186 known versions, newest CVE from 2026-07-13. Vendor: Wpwax.
CVEs of Directorist
- CVE-2026-59518 - CVSS 9.8 (critical), 2026-07-13: Deserialization of Untrusted Data vulnerability in wpWax Directorist directorist allows Object Injection.This issue affects Directorist: from n/a through <=…
- CVE-2026-39509 - CVSS 5.3 (medium), 2026-04-08: Missing Authorization vulnerability in wpWax Directorist directorist allows Exploiting Incorrectly Configured Access Control Security Levels.This issue…
- CVE-2025-68069 - CVSS 7.1 (high), 2026-02-20: Missing Authorization vulnerability in wpWax Directorist directorist allows Exploiting Incorrectly Configured Access Control Security Levels.This issue…
- CVE-2025-64250 - CVSS 4.7 (medium), 2025-12-16: URL Redirection to Untrusted Site ('Open Redirect') vulnerability in wpWax Directorist directorist allows Phishing.This issue affects Directorist: from n/a…
- CVE-2025-1570 - CVSS 9.8 (critical), 2025-02-28: The Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings plugin for WordPress is vulnerable to privilege escalation via account…
- CVE-2024-12041 - CVSS 5.3 (medium), 2025-02-01: The Directorist: AI-Powered WordPress Business Directory Plugin with Classified Ads Listings plugin for WordPress is vulnerable to Information Exposure in all…
- CVE-2024-33929 - CVSS 5.3 (medium), 2024-05-03: Missing Authorization vulnerability in wpWax Directorist.This issue affects Directorist: from n/a through 7.8.6.
- CVE-2024-1322 - CVSS 5.3 (medium), 2024-02-29: The Directorist – WordPress Business Directory Plugin with Classified Ads Listings plugin for WordPress is vulnerable to unauthorized modification of data due…
- CVE-2023-2252 - CVSS 2.7 (low), 2024-01-16: The Directorist WordPress plugin before 7.5.4 is vulnerable to Local File Inclusion as it does not validate the file parameter when importing CSV files.
- CVE-2023-41798 - CVSS 8.8 (high), 2023-11-07: Improper Neutralization of Formula Elements in a CSV File vulnerability in wpWax Directorist – WordPress Business Directory Plugin with Classified Ads…
- CVE-2023-1889 - CVSS 6.5 (medium), 2023-06-09: The Directorist plugin for WordPress is vulnerable to an Insecure Direct Object Reference in versions up to, and including, 7.5.4. This is due to improper…
- CVE-2023-1888 - CVSS 8.8 (high), 2023-06-09: The Directorist plugin for WordPress is vulnerable to an arbitrary user password reset in versions up to, and including, 7.5.4. This is due to a lack of…
- CVE-2022-3961 - CVSS 6.5 (medium), 2022-12-19: The Directorist WordPress plugin before 7.4.4 does not prevent users with low privileges (like subscribers) from accessing sensitive system information.
- CVE-2022-3930 - CVSS 6.5 (medium), 2022-12-12: The Directorist WordPress plugin before 7.4.2.2 suffers from an IDOR vulnerability which an attacker can exploit to change the password of arbitrary users…
- CVE-2022-2376 - CVSS 5.3 (medium), 2022-09-05: The Directorist WordPress plugin before 7.3.1 discloses the email address of all users in an AJAX action available to both unauthenticated and any…
- CVE-2022-2377 - CVSS 4.3 (medium), 2022-08-22: The Directorist WordPress plugin before 7.3.0 does not have authorisation and CSRF checks in an AJAX action, allowing any authenticated users to send…
- CVE-2022-2046 - CVSS 4.9 (medium), 2022-08-08: The Directorist WordPress plugin before 7.2.3 allows administrators to download other plugins from the same vendor directly to the site, but does not check…
- CVE-2021-24981 - CVSS 7.5 (high), 2021-12-21: The Directorist WordPress plugin before 7.0.6.2 was vulnerable to Cross-Site Request Forgery to Remote File Upload leading to arbitrary PHP shell uploads in…
