Login Request a demo
DI
Product
Directorist
by wpWax · last CVE Jul 13, 2026
17
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities17In the news0Timeline
Severity mix
Critical 2High 4Medium 10Low 1
Severity
All severities17Critical2High4Medium10Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Directorist to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-41798
8.8
1%
Nov 7
Improper Neutralization of Formula Elements in a CSV File vulnerability in wpWax Directorist – WordPress Business Directory Plugin with Classified Ads Listing.This issue affects…
Affected: through 7.7.1
CVE-2023-1888
8.8
1%
Jun 9
The Directorist plugin for WordPress is vulnerable to an arbitrary user password reset in versions up to, and including, 7.5.4
Affected: through 7.5.4
CVE-2021-24981
7.5
1%
Dec 21
The Directorist WordPress plugin before 7.0.6.2 was vulnerable to Cross-Site Request Forgery to Remote File Upload leading to arbitrary PHP shell uploads in the wp-content/plugins…
Affected: before 7.0.6.2
CVE-2025-68069
7.1
0%
Feb 20
WordPress Directorist plugin <= 8.6.6 - Broken Access Control vulnerability
Affected: through 8.6.6
Showing 4