Directorist: AI-Powered Business Directory, Listings & Classified Ads vulnerabilities

Product

Directorist: AI-Powered Business Directory, Listings & Classified Ads

by wpwax · last CVE Oct 14, 2026

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities10 In the news0 Timeline

Severity mix

Critical 1High 3Medium 6Low 0

Severity

All severities10 Critical1 High3 Medium6 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Directorist: AI-Powered Business Directory, Listings & Classified Ads to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2025-1570	9.8	0%	Feb 28	Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings <= 8.1 - Privilege Escalation and Account Takeover via Weak OTP Affected: through 8.1
CVE-2023-1888	8.8	1%	Jun 9	Directorist <= 7.5.4 - Authenticated (Subscriber+) Arbitrary User Password Reset to Privilege Escalation Affected: through 7.5.4
CVE-2026-17092	8.1	1%	Oct 14	Directorist: AI-Powered Business Directory, Listings & Classified Ads <= 8.10.2.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Listing Deletion via 'listing_id' Parameter Affected: through 8.10.2.1
CVE-2025-10488	8.1	1%	Oct 25	Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings <= 8.4.8 - Authenticated (Subscriber+) Arbitrary File Move Affected: through 8.4.8
CVE-2025-12174	6.5	0%	Nov 19	Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings <= 8.5.2 - Missing Authorization to Authenticated (Subscriber+) Data Export and Slug Update Affected: through 8.5.2
CVE-2023-1889	6.5	1%	Jun 9	Directorist <= 7.5.4 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Post Deletion in listing_task Affected: through 7.5.4
CVE-2026-100185	6.4	0%	Oct 14	Directorist: AI-Powered Business Directory, Listings & Classified Ads <= 8.10.2.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'phone' Listing Field Affected: through 8.10.2.1
CVE-2025-2224	5.3	0%	Mar 25	Directorist <= 8.2 - Missing Authorization to Unauthenticated Arbitrary Post Publishing Affected: through 8.2
CVE-2024-12041	5.3	0%	Feb 1	Directorist – AI-Powered WordPress Business Directory Plugin with Classified Ads Listings <= 8.0.12 - Unauthenticated User Information Exposure Affected: through 8.0.12
CVE-2024-1322	5.3	1%	Feb 20	Directorist <= 7.8.4 - Missing Authorization to Unauthenticated Settings Change Affected: through 7.8.4