Directorist

3 CVEs product

Monthly

CVE-2026-39509 This Week

Missing Authorization vulnerability in wpWax Directorist directorist allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Directorist: from n/a through <= 8.5.10.

WordPress PHP Authentication Bypass Directorist
NVD
EPSS
0.0%
CVE-2025-1570 HIGH This Week

The Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

WordPress Privilege Escalation Directorist PHP
NVD
CVSS 3.1
8.1
EPSS
0.4%
CVE-2024-12041 MEDIUM PATCH This Month

The Directorist: AI-Powered WordPress Business Directory Plugin with Classified Ads Listings plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 8.0.12. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

WordPress Information Disclosure Directorist
NVD
CVSS 3.1
5.3
EPSS
0.3%
CVE-2026-39509
EPSS 0%
This Week

Missing Authorization vulnerability in wpWax Directorist directorist allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Directorist: from n/a through <= 8.5.10.

WordPress PHP Authentication Bypass +1
NVD
CVE-2025-1570
EPSS 0% CVSS 8.1
HIGH This Week

The Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

WordPress Privilege Escalation Directorist +1
NVD
CVE-2024-12041
EPSS 0% CVSS 5.3
MEDIUM PATCH This Month

The Directorist: AI-Powered WordPress Business Directory Plugin with Classified Ads Listings plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 8.0.12. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

WordPress Information Disclosure Directorist
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy