Skip to contentUnknown Directorist: Ai-powered Business Directory, Listings & Classified Ads vulnerabilities
- unknown directorist: ai-powered business directory, listings & classified adsDirectorist < 8.11.1 - Subscriber+ Listing Moderation Bypass via REST Status UpdateCVE-2026-1185313.1 Low
- unknown directorist: ai-powered business directory, listings & classified adsDirectorist < 8.11 - Subscriber+ Payment Retry on Other Users' Orders via IDORCVE-2026-1185344.3 Medium
- unknown directorist: ai-powered business directory, listings & classified adsDirectorist < 8.11 - Subscriber+ Order and Payment Information Disclosure via Payment ReceiptCVE-2026-1185334.3 Medium
- unknown directorist: ai-powered business directory, listings & classified adsDirectorist < 8.11 - Subscriber+ Arbitrary Media Deletion via Listing Image FieldCVE-2026-1185326.5 Medium
- unknown directorist: ai-powered business directory, listings & classified adsDirectorist < 8.11 - Admin+ Cross-Site Account Lockout via Email Verification Bulk ActionCVE-2026-1185305.0 Medium
- unknown directorist: ai-powered business directory, listings & classified adsDirectorist < 8.11 - Subscriber+ Other Users' Pending Listing Publication via Featured Listing CheckoutCVE-2026-1185293.1 Low
- unknown directorist: ai-powered business directory, listings & classified adsDirectorist < 8.11 - Subscriber+ Draft Listing Contact Information Disclosure via IDORCVE-2026-1185284.3 Medium
- unknown directorist: ai-powered business directory, listings & classified adsDirectorist < 8.9.5 - Subscriber+ Cross-User Favorites Read and Write via REST Favorites EndpointCVE-2026-841505.4 Medium
- unknown directorist: ai-powered business directory, listings & classified adsDirectorist 3.1.0 - 8.9.4 - Subscriber+ Arbitrary Listing Deletion via remove_listingCVE-2026-840986.5 Medium
- unknown directorist: ai-powered business directory, listings & classified adsDirectorist < 8.9.5 - Subscriber+ SSRF via Avatar URLCVE-2026-840465.0 Medium
- unknown directorist: ai-powered business directory, listings & classified adsDirectorist 8.9.1 - 8.9.4 - Subscriber+ Paid Order and Payment Record Forgery via REST Orders EndpointCVE-2026-840274.3 Medium
- unknown directorist: ai-powered business directory, listings & classified adsDirectorist 8.1 - 8.9.4 - Unauthenticated Sensitive Data Disclosure via REST Users EndpointCVE-2026-840265.3 Medium
- unknown directorist: ai-powered business directory, listings & classified adsDirectorist 8.5 - 8.9.4 - Subscriber+ Order and Financial Record Disclosure via REST Orders EndpointCVE-2026-777664.3 Medium
- unknown directorist: ai-powered business directory, listings & classified adsDirectorist < 8.9 - Subscriber+ Arbitrary Post Meta Write via atbdp_post_attachment_uploadCVE-2026-840663.1 Low
- unknown directorist: ai-powered business directory, listings & classified adsDirectorist 8.5 - 8.9.2 - Subscriber+ Arbitrary Image Move via REST v2 Listing SubmissionCVE-2026-777575.4 Medium