DA
Product
Directorist: AI-Powered Business Directory, Listings & Classified Ads
8
CVEs
0
On KEV
6.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 7Low 1
Watch
Add Directorist: AI-Powered Business Directory, Listings & Classified Ads to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-84098 | 6.5 | Sep 23 | Directorist 3.1.0 - 8.9.4 - Subscriber+ Arbitrary Listing Deletion via remove_listing Affected: 3.1.0 before 8.9.5 |
| CVE-2026-84150 | 5.4 | Sep 23 | Directorist < 8.9.5 - Subscriber+ Cross-User Favorites Read and Write via REST Favorites Endpoint Affected: before 8.9.5 |
| CVE-2026-77757 | 5.4 | Aug 26 | Directorist 8.5 - 8.9.2 - Subscriber+ Arbitrary Image Move via REST v2 Listing Submission Affected: 8.5 before 8.9.3 |
| CVE-2026-84026 | 5.3 | Sep 23 | Directorist 8.1 - 8.9.4 - Unauthenticated Sensitive Data Disclosure via REST Users Endpoint Affected: 8.1 before 8.9.5 |
| CVE-2026-84046 | 5.0 | Sep 23 | Directorist < 8.9.5 - Subscriber+ SSRF via Avatar URL Affected: before 8.9.5 |
| CVE-2026-84027 | 4.3 | Sep 23 | Directorist 8.9.1 - 8.9.4 - Subscriber+ Paid Order and Payment Record Forgery via REST Orders Endpoint Affected: 8.9.1 before 8.9.5 |
| CVE-2026-77766 | 4.3 | Sep 23 | Directorist 8.5 - 8.9.4 - Subscriber+ Order and Financial Record Disclosure via REST Orders Endpoint Affected: 8.5 before 8.9.5 |
| CVE-2026-84066 | 3.1 | Sep 4 | Directorist < 8.9 - Subscriber+ Arbitrary Post Meta Write via atbdp_post_attachment_upload Affected: before 8.9 |
Showing 8