Wpwax

Directorist

16 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.3

CVE-2025-2224

  • EPSS 0.1%
  • Veröffentlicht 25.03.2025 05:22:48
  • Zuletzt bearbeitet 27.03.2025 16:45:46

The Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings plugin for WordPress is vulnerable to unauthorized access and modification of data due to a missing capability check on the 'parse_query' function in all versions up ...

9.8

CVE-2025-1570

  • EPSS 0.1%
  • Veröffentlicht 28.02.2025 09:15:12
  • Zuletzt bearbeitet 06.03.2025 15:00:16

The Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 8.1. This is due to the directorist_generate_pass...

5.3

CVE-2024-12041

  • EPSS 0.07%
  • Veröffentlicht 01.02.2025 06:15:29
  • Zuletzt bearbeitet 24.02.2025 16:05:18

The Directorist: AI-Powered WordPress Business Directory Plugin with Classified Ads Listings plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 8.0.12 via the /wp-json/directorist/v1/users/ endpoint. This...

4.3

CVE-2023-35052

  • EPSS 0.1%
  • Veröffentlicht 13.12.2024 15:15:16
  • Zuletzt bearbeitet 13.12.2024 15:15:16

Missing Authorization vulnerability in wpWax - WP Business Directory Plugin and Classified Listings Directory Directorist allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Directorist: from n/a through 7.5.4.

5.3

CVE-2024-33929

  • EPSS 0.08%
  • Veröffentlicht 03.05.2024 09:15:09
  • Zuletzt bearbeitet 21.11.2024 09:17:45

Missing Authorization vulnerability in wpWax Directorist.This issue affects Directorist: from n/a through 7.8.6.

5.3

CVE-2024-1322

  • EPSS 0.24%
  • Veröffentlicht 29.02.2024 01:43:47
  • Zuletzt bearbeitet 27.02.2025 22:03:40

The Directorist – WordPress Business Directory Plugin with Classified Ads Listings plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'setup_wizard' function in all versions up to, and inc...

2.7

CVE-2023-2252

Exploit
  • EPSS 11.53%
  • Veröffentlicht 16.01.2024 16:15:10
  • Zuletzt bearbeitet 02.06.2025 15:15:22

The Directorist WordPress plugin before 7.5.4 is vulnerable to Local File Inclusion as it does not validate the file parameter when importing CSV files.

8.8

CVE-2023-41798

  • EPSS 0.69%
  • Veröffentlicht 07.11.2023 18:15:08
  • Zuletzt bearbeitet 19.02.2025 22:15:20

Improper Neutralization of Formula Elements in a CSV File vulnerability in wpWax Directorist – WordPress Business Directory Plugin with Classified Ads Listing.This issue affects Directorist – WordPress Business Directory Plugin with Classified Ads Li...

8.8

CVE-2023-1888

  • EPSS 0.26%
  • Veröffentlicht 09.06.2023 06:15:58
  • Zuletzt bearbeitet 21.11.2024 07:40:05

The Directorist plugin for WordPress is vulnerable to an arbitrary user password reset in versions up to, and including, 7.5.4. This is due to a lack of validation checks within login.php. This makes it possible for authenticated attackers, with subs...

6.5

CVE-2023-1889

  • EPSS 0.07%
  • Veröffentlicht 09.06.2023 06:15:58
  • Zuletzt bearbeitet 21.11.2024 07:40:05

The Directorist plugin for WordPress is vulnerable to an Insecure Direct Object Reference in versions up to, and including, 7.5.4. This is due to improper validation and authorization checks within the listing_task function. This makes it possible fo...