Skip to contentUnknown Directory vulnerabilities
- paidmembershipspro paid memberships pro, unknown pmpro-member-directory +1 morePaid Memberships Pro - Member Directory Add On < 1.2.6 - Contributor+ Sensitive Information Disclosure via SQLiCVE-2024-12876.5 Medium
- quantumcloud simple video directorySimple Video Directory < 1.4.4 - Contributor+ Stored XSSCVE-2024-58115.4 Medium
- salephpscripts web directory freeWeb Directory Free < 1.7.0 - Unauthenticated SQL InjectionCVE-2024-3552Public exploitEPSS 67.1%9.8 Critical
- cyberlord92 staff / employee business directory for active directory, miniorange staff \/ employee business directory for active directory +1 moreStaff / Employee Business Directory for Active Directory < 1.2.3 - Improper escaping of LDAP entriesCVE-2023-47575.4 Medium
- unknown active directory integration / ldap integration, miniorange active directory integration \/ ldap integration +1 moreActive Directory Integration < 4.1.10 - Unauthenticated Log DisclosureCVE-2023-5003Fix availableEPSS 26.6%7.5 High
- cyberlord92 active directory integration / ldap integration, miniorange active directory integration \/ ldap integration +1 moreActive Directory Integration / LDAP Integration <= 4.1.10 - LDAP PassbackCVE-2023-45062.2 Low
- ajaydsouza connections reloaded, archimidismertzanos atlast business, fashionable store +47 more +49 moreMultiple Themes - Reflected XSSCVE-2023-28136.1 Medium
- cyberlord92 active directory integration / ldap integration, miniorange active directory integration \/ ldap integration +1 moreActive Directory Integration / LDAP Integration <= 4.1.5 - Authenticated (Subscriber+) LDAP InjectionCVE-2023-34477.6 High
- cyberlord92 active directory integration / ldap integration, miniorange active directory integration \/ ldap integration +1 moreActive Directory Integration / LDAP Integration <= 4.1.4 - Cross-Site Request Forgery to SQL InjectionCVE-2023-25993.1 Low
- cyberlord92 active directory integration / ldap integration, miniorange active directory integration \/ ldap integration +1 moreActive Directory Integration / LDAP Integration <= 4.1.4 - Authenticated (Administrator+) SQL InjectionCVE-2023-24847.2 High
- unknown active directory integration / ldap integration, miniorange active directory integration \/ ldap integration +1 moreActive Directory Integration / LDAP Integration < 4.1.1 - Unauthenticated Data DisclosureCVE-2023-08127.5 High
- article directory project directory, unknown article directory +1 moreArticle Directory <= 1.3 - Admin+ Stored XSSCVE-2023-04224.8 Medium
- e-plugins fitness-trainer, hotel listing, photographer-directory +17 more +19 moreMultiple e-plugins - Subscriber+ Privilege EscalationCVE-2020-366668.8 High
- paolo geodirectoryGeoDirectory < 2.2.24 - Admin+ SQLiCVE-2023-02787.2 High
- ayecode geodirectoryGeoDirectory < 2.2.22 - Contributor+ Stored XSS via ShortcodeCVE-2022-47755.4 Medium
- strategy11 awp classifieds, unknown wordpress classifieds plugin – ad directory & listings by awp classifieds +1 moreAWP Classifieds Plugin < 4.3 - Unauthenticated SQLiCVE-2022-32549.8 Critical
- unknown ldap wp login / active directory integration, ldap wp login \/ active directory integration project wp login \/ active directory integration +1 moreLdap WP Login / Active Directory Integration < 3.0.2 - Unauthenticated Settings Update to Auth BypassCVE-2022-29877.5 High
- radiustheme classified listing, unknown classified listing pro - classified ads & business directory plugin +1 moreClassified Listing Pro < 2.0.20 - Reflected Cross-Site ScriptingCVE-2022-26556.1 Medium
- radiustheme classified listing, classima, classima core +4 more +6 moreClassima < 2.1.11 - Reflected Cross-Site ScriptingCVE-2022-26546.1 Medium
- wpwax directorist, unknown directorist – wordpress business directory plugin with classified ads listings +1 moreDirectorist < 7.3.1 - Unauthenticated Email Address DisclosureCVE-2022-23765.3 Medium
- wpwax directorist, unknown directorist – wordpress business directory plugin with classified ads listings +1 moreDirectorist < 7.3.0 - Subscriber+ Arbitrary E-mail SendingCVE-2022-23774.3 Medium
- wpwax directorist, unknown directorist – wordpress business directory plugin with classified ads listings +1 moreDirectorist - Business Directory Plugin < 7.2.3 - Admin+ Arbitrary File UploadCVE-2022-20464.9 Medium
- jeroenpeters1986 name directory, name directory project directory +1 moreName Directory < 1.25.3 - Reflected Cross-Site ScriptingCVE-2022-20726.1 Medium
- jeroenpeters1986 name directory, name directory project directory +1 moreName Directory < 1.25.4 - Stored Cross-Site Scripting via CSRFCVE-2022-20716.1 Medium
- quantumcloud simple link directorySimple Link Directory < 7.7.2 - Unauthenticated SQL injectionCVE-2022-0760EPSS 10.8%9.8 Critical
- unknown directorist – business directory plugin, wpwax directorist +1 moreDirectorist – Business Directory Plugin < 7.0.6.2 - CSRF to Remote File UploadCVE-2021-249817.5 High
- connections-pro connections business directoryConnections Business Directory < 10.4.3 - Admin+ Stored Cross-Site ScriptingCVE-2021-247944.8 Medium
- connections-pro connections business directoryConnections Business Directory < 9.7 - Admin+ CSV InjectionCVE-2020-365038.0 High
- ayecode geodirectory, unknown business directory plugin | geodirectory +1 moreGeoDirectory < 2.1.1.3 - Authenticated Stored Cross-Site Scripting (XSS)CVE-2021-247205.4 Medium
- simple schools staff directory project schools staff directory, unknown simple schools staff directory +1 moreSimple School Staff Directory <= 1.1 - Admin+ Arbitrary File UploadCVE-2021-246637.2 High