Designinvento vulnerabilities
We track 4 vulnerabilities in Designinvento products across 2 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on October 10, 2026.
Latest Designinvento vulnerabilities
- 9.8 Critical severity
DirectoryPress: Improper Control of Filename for Include/Require Statement in PHP Program
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Designinvento DirectoryPress directorypress allows PHP Local File Inclusion.This issue affects DirectoryPress: from n/a through 3.6.27.
- 7.5 High severity
DirectoryPress – Business Directory And…: Improper Neutralization of Special Elements used in an SQL Command
The DirectoryPress – Business Directory And Classified Ad Listing plugin for WordPress is vulnerable to SQL Injection via the 'packages' parameter in versions up to, and including, 3.6.26 due to insufficient escaping on the user supplied parameter and lack of
- 9.8 Critical severity
DirectoryPress: Missing Authorization
Missing Authorization vulnerability in Designinvento DirectoryPress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects DirectoryPress: from n/a through 3.6.2.
- 8.8 High severity
DirectoryPress: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Designinvento DirectoryPress allows SQL Injection.This issue affects DirectoryPress: from n/a through 3.6.10.