Wpwax

Directorist

20 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.1

CVE-2025-68069

  • EPSS 0.03%
  • Veröffentlicht 20.02.2026 15:46:38
  • Zuletzt bearbeitet 24.02.2026 22:16:27

Missing Authorization vulnerability in wpWax Directorist directorist allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Directorist: from n/a through <= 8.5.10.

6.1

CVE-2025-64250

  • EPSS 0.04%
  • Veröffentlicht 16.12.2025 08:12:49
  • Zuletzt bearbeitet 20.01.2026 15:18:49

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in wpWax Directorist directorist allows Phishing.This issue affects Directorist: from n/a through <= 8.5.6.

6.5

CVE-2025-12174

  • EPSS 0.05%
  • Veröffentlicht 19.11.2025 05:45:14
  • Zuletzt bearbeitet 19.11.2025 19:14:59

The Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the 'directorist_prepare_listings_export_file' and 'directorist_type_slu...

8.1

CVE-2025-10488

  • EPSS 0.3%
  • Veröffentlicht 25.10.2025 06:49:21
  • Zuletzt bearbeitet 27.10.2025 13:20:15

The Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings plugin for WordPress is vulnerable to arbitrary file move due to insufficient file path validation in the add_listing_action AJAX action in all versions up to, and inc...

5.3

CVE-2025-2224

  • EPSS 0.19%
  • Veröffentlicht 25.03.2025 05:22:48
  • Zuletzt bearbeitet 27.03.2025 16:45:46

The Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings plugin for WordPress is vulnerable to unauthorized access and modification of data due to a missing capability check on the 'parse_query' function in all versions up ...

9.8

CVE-2025-1570

  • EPSS 0.41%
  • Veröffentlicht 28.02.2025 09:15:12
  • Zuletzt bearbeitet 06.03.2025 15:00:16

The Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 8.1. This is due to the directorist_generate_pass...

5.3

CVE-2024-12041

  • EPSS 0.31%
  • Veröffentlicht 01.02.2025 06:15:29
  • Zuletzt bearbeitet 24.02.2025 16:05:18

The Directorist: AI-Powered WordPress Business Directory Plugin with Classified Ads Listings plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 8.0.12 via the /wp-json/directorist/v1/users/ endpoint. This...

4.3

CVE-2023-35052

  • EPSS 0.16%
  • Veröffentlicht 13.12.2024 15:15:16
  • Zuletzt bearbeitet 13.12.2024 15:15:16

Missing Authorization vulnerability in wpWax - WP Business Directory Plugin and Classified Listings Directory Directorist allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Directorist: from n/a through 7.5.4.

5.3

CVE-2024-33929

  • EPSS 0.08%
  • Veröffentlicht 03.05.2024 09:15:09
  • Zuletzt bearbeitet 21.11.2024 09:17:45

Missing Authorization vulnerability in wpWax Directorist.This issue affects Directorist: from n/a through 7.8.6.

5.3

CVE-2024-1322

  • EPSS 0.24%
  • Veröffentlicht 29.02.2024 01:43:47
  • Zuletzt bearbeitet 27.02.2025 22:03:40

The Directorist – WordPress Business Directory Plugin with Classified Ads Listings plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'setup_wizard' function in all versions up to, and inc...