Product by wpWax

    Directorist

    20 known vulnerabilities in Directorist (wpWax), 0 of them actively exploited (CISA KEV).

    Key figures

    20

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    2

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Directorist (wpWax)
    CriticalCVE-2026-59518

    WordPress Directorist plugin <= 8.8.2 - PHP Object Injection vulnerability

    		9.8
    MediumCVE-2022-2376

    Directorist < 7.3.1 - Unauthenticated Email Address Disclosure

    		5.3
    HighCVE-2023-1888

    wpWax Directorist: Improper Input Validation

    also in 1 other product

    		8.8
    HighCVE-2021-24981

    Directorist – Business Directory Plugin < 7.0.6.2 - CSRF to Remote File Upload

    		7.5
    MediumCVE-2026-122661

    WordPress Directorist plugin <= 8.10.7 - Cross Site Scripting (XSS) vulnerability

    		6.5
    MediumCVE-2026-119497

    WordPress Directorist plugin <= 8.10.6 - Cross Site Scripting (XSS) vulnerability

    		6.5
    CriticalCVE-2025-1570

    wpWax Directorist: Weak Password Recovery Mechanism for Forgotten Password

    also in 1 other product

    		8.1
    MediumCVE-2022-3961

    Directorist < 7.4.4 - Subscriber+ Sensitive Information Disclosure

    		6.5
    LowCVE-2023-2252

    Directorist < 7.5.4 - Admin+ LFI

    		2.7
    MediumCVE-2022-2046

    Directorist - Business Directory Plugin < 7.2.3 - Admin+ Arbitrary File Upload

    		4.9
    HighCVE-2025-68069

    WordPress Directorist plugin <= 8.6.6 - Broken Access Control vulnerability

    		7.1
    MediumCVE-2022-3930

    Directorist < 7.4.2.2 - Subscriber+ Arbitrary User Password Update via IDOR

    		6.5
    MediumCVE-2023-1889

    wpWax Directorist: Authorization Bypass Through User-Controlled Key

    also in 1 other product

    		6.5
    HighCVE-2023-41798

    WordPress Directorist Plugin <= 7.7.1 is vulnerable to CSV Injection

    		5.1
    MediumCVE-2024-1322

    Directorist <= 7.8.4 - Missing Authorization to Unauthenticated Settings Change

    also in 1 other product

    		5.3
    MediumCVE-2024-12041

    wpWax Directorist: Exposure of Private Personal Information to an Unauthorized Actor

    also in 1 other product

    		5.3
    MediumCVE-2026-39509

    WordPress Directorist plugin <= 8.5.10 - Broken Access Control vulnerability

    		5.3
    MediumCVE-2024-33929

    WordPress Directorist plugin <= 7.8.6 - Broken Access Control vulnerability

    		5.3
    MediumCVE-2025-64250

    WordPress Directorist plugin <= 8.6.6 - Open Redirection vulnerability

    		4.7
    MediumCVE-2022-2377

    Directorist < 7.3.0 - Subscriber+ Arbitrary E-mail Sending

    		4.3

    All products by wpWax