Login Request a demo
DI
Product
Directorist
by wpWax · last CVE Jul 13, 2026
18
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities18In the news0Timeline
Severity mix
Critical 2High 4Medium 11Low 1
Severity
All severities18Critical2High4Medium11Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Directorist to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-41798
8.8
1%
Nov 7
WordPress Directorist Plugin <= 7.7.1 is vulnerable to CSV Injection
Affected: through 7.7.1
CVE-2023-1888
8.8
1%
Jun 9
Directorist <= 7.5.4 - Authenticated (Subscriber+) Arbitrary User Password Reset to Privilege Escalation
Affected: through 7.5.4
CVE-2021-24981
7.5
1%
Dec 21
The Directorist WordPress plugin before 7.0.6.2 was vulnerable to Cross-Site Request Forgery to Remote File Upload leading to arbitrary PHP shell uploads in the wp-content/plugins…
Affected: before 7.0.6.2
CVE-2025-68069
7.1
0%
Feb 20
WordPress Directorist plugin <= 8.6.6 - Broken Access Control vulnerability
Affected: through 8.6.6
Showing 4