Skip to content
Unknown Directorist vulnerabilities
-
unknown directorist: ai-powered business directory, listings & classified ads
Directorist < 8.11 - Subscriber+ Payment Retry on Other Users' Orders via IDOR
CVE-2026-118534
4.3 Medium
-
unknown directorist: ai-powered business directory, listings & classified ads
Directorist < 8.11 - Subscriber+ Order and Payment Information Disclosure via Payment Receipt
CVE-2026-118533
4.3 Medium
-
unknown directorist: ai-powered business directory, listings & classified ads
Directorist < 8.11 - Subscriber+ Arbitrary Media Deletion via Listing Image Field
CVE-2026-118532
6.5 Medium
-
unknown directorist: ai-powered business directory, listings & classified ads
Directorist < 8.11 - Admin+ Cross-Site Account Lockout via Email Verification Bulk Action
CVE-2026-118530
5.0 Medium
-
unknown directorist: ai-powered business directory, listings & classified ads
Directorist < 8.11 - Subscriber+ Other Users' Pending Listing Publication via Featured Listing Checkout
CVE-2026-118529
3.1 Low
-
unknown directorist: ai-powered business directory, listings & classified ads
Directorist < 8.11 - Subscriber+ Draft Listing Contact Information Disclosure via IDOR
CVE-2026-118528
4.3 Medium
-
unknown directorist: ai-powered business directory, listings & classified ads
Directorist < 8.9.5 - Subscriber+ Cross-User Favorites Read and Write via REST Favorites Endpoint
CVE-2026-84150
5.4 Medium
-
unknown directorist: ai-powered business directory, listings & classified ads
Directorist 3.1.0 - 8.9.4 - Subscriber+ Arbitrary Listing Deletion via remove_listing
CVE-2026-84098
6.5 Medium
-
unknown directorist: ai-powered business directory, listings & classified ads
Directorist < 8.9.5 - Subscriber+ SSRF via Avatar URL
CVE-2026-84046
5.0 Medium
-
unknown directorist: ai-powered business directory, listings & classified ads
Directorist 8.9.1 - 8.9.4 - Subscriber+ Paid Order and Payment Record Forgery via REST Orders Endpoint
CVE-2026-84027
4.3 Medium
-
unknown directorist: ai-powered business directory, listings & classified ads
Directorist 8.1 - 8.9.4 - Unauthenticated Sensitive Data Disclosure via REST Users Endpoint
CVE-2026-84026
5.3 Medium
-
unknown directorist: ai-powered business directory, listings & classified ads
Directorist 8.5 - 8.9.4 - Subscriber+ Order and Financial Record Disclosure via REST Orders Endpoint
CVE-2026-77766
4.3 Medium
-
unknown directorist: ai-powered business directory, listings & classified ads
Directorist < 8.9 - Subscriber+ Arbitrary Post Meta Write via atbdp_post_attachment_upload
CVE-2026-84066
3.1 Low
-
unknown directorist: ai-powered business directory, listings & classified ads
Directorist 8.5 - 8.9.2 - Subscriber+ Arbitrary Image Move via REST v2 Listing Submission
CVE-2026-77757
5.4 Medium
-
unknown directorist
Directorist < 7.5.4 - Admin+ LFI
CVE-2023-2252
2.7 Low
-
unknown directorist
Directorist < 7.4.4 - Subscriber+ Sensitive Information Disclosure
CVE-2022-3961
6.5 Medium
-
unknown directorist
Directorist < 7.4.2.2 - Subscriber+ Arbitrary User Password Update via IDOR
CVE-2022-3930
6.5 Medium
-
wpwax directorist, unknown directorist – wordpress business directory plugin with classified ads listings +1 more
Directorist < 7.3.1 - Unauthenticated Email Address Disclosure
CVE-2022-2376
5.3 Medium
-
wpwax directorist, unknown directorist – wordpress business directory plugin with classified ads listings +1 more
Directorist < 7.3.0 - Subscriber+ Arbitrary E-mail Sending
CVE-2022-2377
4.3 Medium
-
wpwax directorist, unknown directorist – wordpress business directory plugin with classified ads listings +1 more
Directorist - Business Directory Plugin < 7.2.3 - Admin+ Arbitrary File Upload
CVE-2022-2046
4.9 Medium
-
unknown directorist – business directory plugin, wpwax directorist +1 more
Directorist – Business Directory Plugin < 7.0.6.2 - CSRF to Remote File Upload
CVE-2021-24981
7.5 High