Wpwax

Directorist

16 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.3

CVE-2025-2224

  • EPSS 0.1%
  • Published 25.03.2025 05:22:48
  • Last modified 27.03.2025 16:45:46

The Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings plugin for WordPress is vulnerable to unauthorized access and modification of data due to a missing capability check on the 'parse_query' function in all versions up ...

9.8

CVE-2025-1570

  • EPSS 0.1%
  • Published 28.02.2025 09:15:12
  • Last modified 06.03.2025 15:00:16

The Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 8.1. This is due to the directorist_generate_pass...

5.3

CVE-2024-12041

  • EPSS 0.07%
  • Published 01.02.2025 06:15:29
  • Last modified 24.02.2025 16:05:18

The Directorist: AI-Powered WordPress Business Directory Plugin with Classified Ads Listings plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 8.0.12 via the /wp-json/directorist/v1/users/ endpoint. This...

4.3

CVE-2023-35052

  • EPSS 0.1%
  • Published 13.12.2024 15:15:16
  • Last modified 13.12.2024 15:15:16

Missing Authorization vulnerability in wpWax - WP Business Directory Plugin and Classified Listings Directory Directorist allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Directorist: from n/a through 7.5.4.

5.3

CVE-2024-33929

  • EPSS 0.08%
  • Published 03.05.2024 09:15:09
  • Last modified 21.11.2024 09:17:45

Missing Authorization vulnerability in wpWax Directorist.This issue affects Directorist: from n/a through 7.8.6.

5.3

CVE-2024-1322

  • EPSS 0.24%
  • Published 29.02.2024 01:43:47
  • Last modified 27.02.2025 22:03:40

The Directorist – WordPress Business Directory Plugin with Classified Ads Listings plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'setup_wizard' function in all versions up to, and inc...

2.7

CVE-2023-2252

Exploit
  • EPSS 11.53%
  • Published 16.01.2024 16:15:10
  • Last modified 02.06.2025 15:15:22

The Directorist WordPress plugin before 7.5.4 is vulnerable to Local File Inclusion as it does not validate the file parameter when importing CSV files.

8.8

CVE-2023-41798

  • EPSS 0.69%
  • Published 07.11.2023 18:15:08
  • Last modified 19.02.2025 22:15:20

Improper Neutralization of Formula Elements in a CSV File vulnerability in wpWax Directorist – WordPress Business Directory Plugin with Classified Ads Listing.This issue affects Directorist – WordPress Business Directory Plugin with Classified Ads Li...

8.8

CVE-2023-1888

  • EPSS 0.26%
  • Published 09.06.2023 06:15:58
  • Last modified 21.11.2024 07:40:05

The Directorist plugin for WordPress is vulnerable to an arbitrary user password reset in versions up to, and including, 7.5.4. This is due to a lack of validation checks within login.php. This makes it possible for authenticated attackers, with subs...

6.5

CVE-2023-1889

  • EPSS 0.07%
  • Published 09.06.2023 06:15:58
  • Last modified 21.11.2024 07:40:05

The Directorist plugin for WordPress is vulnerable to an Insecure Direct Object Reference in versions up to, and including, 7.5.4. This is due to improper validation and authorization checks within the listing_task function. This makes it possible fo...