DA
Product
Directorist: AI-Powered Business Directory, Listings & Classified Ads
10
CVEs
0
On KEV
9.8
Max CVSS
2
New 30D
Severity mix
Critical 1High 3Medium 6Low 0
Watch
Add Directorist: AI-Powered Business Directory, Listings & Classified Ads to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-12174 | 6.5 | Nov 19 | Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings <= 8.5.2 - Missing Authorization to Authenticated (Subscriber+) Data Export and Slug Update Affected: through 8.5.2 |
| CVE-2023-1889 | 6.5 | Jun 9 | Directorist <= 7.5.4 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Post Deletion in listing_task Affected: through 7.5.4 |
| CVE-2026-100185 | 6.4 | Oct 14 | Directorist: AI-Powered Business Directory, Listings & Classified Ads <= 8.10.2.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'phone' Listing Field Affected: through 8.10.2.1 |
| CVE-2025-2224 | 5.3 | Mar 25 | Directorist <= 8.2 - Missing Authorization to Unauthenticated Arbitrary Post Publishing Affected: through 8.2 |
| CVE-2024-12041 | 5.3 | Feb 1 | Directorist – AI-Powered WordPress Business Directory Plugin with Classified Ads Listings <= 8.0.12 - Unauthenticated User Information Exposure Affected: through 8.0.12 |
| CVE-2024-1322 | 5.3 | Feb 20 | Directorist <= 7.8.4 - Missing Authorization to Unauthenticated Settings Change Affected: through 7.8.4 |
Showing 6