Security
فارسی
All products

directorist

WordPress · Plugin
41 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Directorist <= 8.10 - Authenticated (Subscriber+) Arbitrary Media Attachment DeletionCVE-2026-118532 directorist WordPress Medium Fix reported
Directorist: AI-Powered Business Directory, Listings & Classified Ads <= 8.10.7 - Authenticated (Subscriber+) Stored Cross-Site ScriptingCVE-2026-122661 directorist WordPress Medium Fix reported
Directorist: AI-Powered Business Directory, Listings & Classified Ads <= 8.10.6 - Authenticated (Subscriber+) Stored Cross-Site ScriptingCVE-2026-119497 directorist WordPress Medium Fix reported
Directorist <= 8.10 - Authenticated (Subscriber+) Insecure Direct Object ReferenceCVE-2026-118534 directorist WordPress Medium Fix reported
Directorist <= 8.10 - Authenticated (Subscriber+) Insecure Direct Object ReferenceCVE-2026-118533 directorist WordPress Medium Fix reported
Directorist <= 8.10 - Missing AuthorizationCVE-2026-118530 directorist WordPress Low Fix reported
Directorist <= 8.10 - Missing AuthorizationCVE-2026-118529 directorist WordPress Medium Fix reported
Directorist <= 8.10 - Authenticated (Subscriber+) Insecure Direct Object ReferenceCVE-2026-118528 directorist WordPress Medium Fix reported
Directorist: AI-Powered Business Directory, Listings & Classified Ads <= 8.10.2.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'phone' Listing FieldCVE-2026-100185 directorist WordPress Medium Fix reported
Directorist: AI-Powered Business Directory, Listings & Classified Ads <= 8.10.2.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Listing Deletion via 'listing_id' ParameterCVE-2026-17092 directorist WordPress High Fix reported
Directorist <= 8.9.4 - Authenticated (Subscriber+) Insecure Direct Object ReferenceCVE-2026-84150 directorist WordPress Medium Fix reported
Directorist 3.1.0 - 8.9.4 - Missing AuthorizationCVE-2026-84098 directorist WordPress Medium Fix reported
Directorist <= 8.9.4 - Authenticated (Subscriber+) Server-Side Request ForgeryCVE-2026-84046 directorist WordPress Medium Fix reported
Directorist 8.9.1 - 8.9.4 - Missing AuthorizationCVE-2026-84027 directorist WordPress Medium Fix reported
Directorist 8.1 - 8.9.4 - Unauthenticated Information ExposureCVE-2026-84026 directorist WordPress Medium Fix reported
Directorist 8.5 - 8.9.4 - Authenticated (Subscriber+) Insecure Direct Object ReferenceCVE-2026-77766 directorist WordPress Medium Fix reported
Directorist: AI-Powered Business Directory, Listings & Classified Ads < 8.9 - Authenticated (Subscriber+) Insecure Direct Object ReferenceCVE-2026-84066 directorist WordPress Medium Fix reported
Directorist: AI-Powered Business Directory, Listings & Classified Ads 8.5 - 8.9.2 - Authenticated (Subscriber+) Arbitrary Image MoveCVE-2026-77757 directorist WordPress Medium Fix reported
Directorist: AI-Powered Business Directory, Listings & Classified Ads <= 8.8.2 - Authenticated (Subscriber+) PHP Object InjectionCVE-2026-59518 directorist WordPress High Fix reported
Directorist <= 8.5.10 - Missing AuthorizationCVE-2026-39509 directorist WordPress Medium Fix reported