Designinvento vulnerabilities

Products

• Directorypress 12
• Directorypress – Business Directory And Classified Ad Listing 2

Newest

• designinvento directorypress WordPress DirectoryPress plugin <= 3.6.27 - Local File Inclusion vulnerability CVE-2026-62032 9.8 CriticalOctober 10, 2026
• designinvento directorypress – business directory and classified ad listing DirectoryPress – Business Directory And Classified Ad Listing <= 3.6.26 - Unauthenticated SQL Injection via 'packages' CVE-2026-3489 7.5 HighApril 16, 2026
• designinvento directorypress WordPress DirectoryPress plugin <= 3.6.26 - Sensitive Data Exposure vulnerability CVE-2026-39566 4.3 MediumApril 8, 2026
• designinvento directorypress WordPress DirectoryPress plugin <= 3.6.26 - Broken Access Control vulnerability CVE-2026-27387 5.4 MediumFebruary 19, 2026
• designinvento directorypress WordPress DirectoryPress plugin <= 3.6.25 - Broken Access Control vulnerability CVE-2026-23548 5.3 MediumFebruary 19, 2026
• designinvento directorypress WordPress DirectoryPress plugin <= 3.6.25 - Cross Site Scripting (XSS) vulnerability CVE-2025-62967 6.5 MediumOctober 27, 2025
• designinvento directorypress WordPress DirectoryPress Plugin <= 3.6.22 - Cross Site Request Forgery (CSRF) vulnerability CVE-2025-32249 5.4 MediumApril 4, 2025
• designinvento directorypress, directorypress frontend +1 more DirectoryPress Frontend <= 2.7.9 - Cross-Site Request Forgery to Listing Status Update CVE-2024-10581 4.3 MediumFebruary 15, 2025
• designinvento directorypress WordPress DirectoryPress plugin <= 3.6.19 - Cross Site Scripting (XSS) vulnerability CVE-2024-49633 7.1 HighJanuary 7, 2025
• designinvento directorypress, directorypress – business directory and classified ad listing +1 more DirectoryPress <= 3.6.16 - Authenticated (Author+) Stored Cross-Site Scripting CVE-2024-10584 5.4 MediumDecember 24, 2024
• designinvento directorypress WordPress DirectoryPress plugin <= 3.6.2 - Unauthenticated Broken Access Control Vulnerability CVE-2023-37967 6.5 MediumDecember 13, 2024
• designinvento directorypress WordPress DirectoryPress plugin <= 3.6.10 - SQL Injection vulnerability CVE-2024-38755 8.5 HighJuly 22, 2024
• designinvento directorypress WordPress DirectoryPress plugin <= 3.6.7 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2024-32567 7.1 HighApril 18, 2024