Directories Pro EUVD-2026-57899

Exploitation requires the attacker to hold a valid subscriber-level WordPress account on the target site, meaning open user registration must be enabled (Settings > General > Membership set to 'Anyone can register') or the attacker must have obtained credentials through another means. The Directories Pro plugin version must be 2.0.5 or earlier and actively installed and activated. The CVSS vector asserts PR:N, which conflicts with the subscriber prerequisite - actual conditions likely require at minimum PR:L (registered user). Sites with closed registration or subscriber registration gated behind admin approval significantly limit exploitability. No specific non-default plugin configuration is identified as required beyond the plugin being active.

The NVD-assigned CVSS vector (AV:N/AC:H/PR:N/UI:N) contains a notable internal contradiction: it asserts no privileges are required (PR:N), yet the vulnerability is explicitly described as 'Subscriber Privilege Escalation,' implying a subscriber account is a prerequisite. This discrepancy should be verified with the vendor - the realistic attack scenario requires at minimum a registered subscriber account. Adjusting for PR:L would better reflect real-world exploitability. AC:H may reflect that open subscriber registration must be enabled on the target site, which is not universal. EPSS data is not provided; without KEV listing or POC code, the exploitation urgency is moderate. The C:H/I:H impact ratings are significant if privilege escalation reaches administrator level, enabling full site compromise.

An attacker registers a free subscriber account on a target WordPress site running Directories Pro <= 2.0.5 with open user registration enabled. The attacker then sends a crafted HTTP request exploiting the improper privilege assignment flaw to assume administrator-level capabilities. With elevated privileges, the attacker can install malicious plugins, create backdoor accounts, or exfiltrate site data. No public exploit code has been identified at time of analysis.