Login Request a demo
DI
Product
Directorist
by wpWax · last CVE Jul 13, 2026
17
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities17In the news0Timeline
Severity mix
Critical 2High 4Medium 10Low 1
Severity
All severities17Critical2High4Medium10Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Directorist to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-1889
6.5
1%
Jun 9
The Directorist plugin for WordPress is vulnerable to an Insecure Direct Object Reference in versions up to, and including, 7.5.4
Affected: through 7.5.4
CVE-2022-3961
6.5
1%
Dec 19
The Directorist WordPress plugin before 7.4.4 does not prevent users with low privileges (like subscribers) from accessing sensitive system information
Affected: before 7.4.4
CVE-2022-3930
6.5
1%
Dec 12
The Directorist WordPress plugin before 7.4.2.2 suffers from an IDOR vulnerability which an attacker can exploit to change the password of arbitrary users instead of his own
Affected: before 7.4.2.2
CVE-2026-39509
5.3
0%
Apr 8
WordPress Directorist plugin <= 8.5.10 - Broken Access Control vulnerability
Affected: through 8.5.10
CVE-2024-12041
5.3
0%
Feb 1
Directorist – AI-Powered WordPress Business Directory Plugin with Classified Ads Listings <= 8.0.12 - Unauthenticated User Information Exposure
Affected: before 8.1
CVE-2024-1322
5.3
1%
Feb 29
The Directorist – WordPress Business Directory Plugin with Classified Ads Listings plugin for WordPress is vulnerable to unauthorized modification of data due to a missing…
Affected: before 7.8.5
CVE-2022-2376
5.3
2%
Sep 5
The Directorist WordPress plugin before 7.3.1 discloses the email address of all users in an AJAX action available to both unauthenticated and any authenticated users
Affected: before 7.3.1
CVE-2022-2046
4.9
1%
Aug 8
Directorist - Business Directory Plugin < 7.2.3 - Admin+ Arbitrary File Upload
Affected: before 7.2.3
CVE-2025-64250
4.7
0%
Dec 16
WordPress Directorist plugin <= 8.6.6 - Open Redirection vulnerability
Affected: through 8.6.6
CVE-2022-2377
4.3
0%
Aug 22
The Directorist WordPress plugin before 7.3.0 does not have authorisation and CSRF checks in an AJAX action, allowing any authenticated users to send arbitrary emails on behalf of…
Affected: before 7.3.0
Showing 10