Login Request a demo
DI
Product
Directorist
by wpWax · last CVE Jul 13, 2026
18
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities18In the news0Timeline
Severity mix
Critical 2High 4Medium 11Low 1
Severity
All severities18Critical2High4Medium11Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Directorist to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-1889
6.5
1%
Jun 9
Directorist <= 7.5.4 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Post Deletion in listing_task
Affected: through 7.5.4
CVE-2022-3961
6.5
1%
Dec 19
Directorist < 7.4.4 - Subscriber+ Sensitive Information Disclosure
Affected: before 7.4.4
CVE-2022-3930
6.5
1%
Dec 12
Directorist < 7.4.2.2 - Subscriber+ Arbitrary User Password Update via IDOR
Affected: before 7.4.2.2
CVE-2026-39509
5.3
0%
Apr 8
WordPress Directorist plugin <= 8.5.10 - Broken Access Control vulnerability
Affected: through 8.5.10
CVE-2024-12041
5.3
0%
Feb 1
Directorist – AI-Powered WordPress Business Directory Plugin with Classified Ads Listings <= 8.0.12 - Unauthenticated User Information Exposure
Affected: before 8.1
CVE-2024-33929
5.3
0%
May 3
WordPress Directorist plugin <= 7.8.6 - Broken Access Control vulnerability
Affected: through 7.8.6
CVE-2024-1322
5.3
1%
Feb 20
Directorist <= 7.8.4 - Missing Authorization to Unauthenticated Settings Change
Affected: before 7.8.5
CVE-2022-2376
5.3
2%
Sep 5
Directorist < 7.3.1 - Unauthenticated Email Address Disclosure
Affected: before 7.3.1
CVE-2022-2046
4.9
1%
Aug 8
Directorist - Business Directory Plugin < 7.2.3 - Admin+ Arbitrary File Upload
Affected: before 7.2.3
CVE-2025-64250
4.7
0%
Dec 16
WordPress Directorist plugin <= 8.6.6 - Open Redirection vulnerability
Affected: through 8.6.6
CVE-2022-2377
4.3
0%
Aug 22
Directorist < 7.3.0 - Subscriber+ Arbitrary E-mail Sending
Affected: before 7.3.0
Showing 11