Directorist: AI-Powered Business Directory, Listings & Classified Ads vulnerabilities
4 known vulnerabilities in Directorist: AI-Powered Business Directory, Listings & Classified Ads from wpWax. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.1 High severity
Directorist: AI-Powered Business Directory…: Missing Authorization
The Directorist: AI-Powered Business Directory, Listings & Classified Ads plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 8.10.2.1. This is due to the plugin not properly verifying that a user is authorized to p
- 8.1 High severity
Directorist: AI-Powered Business Directory…: Improper Limitation of a Pathname to a Restricted Directory
The Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings plugin for WordPress is vulnerable to arbitrary file move due to insufficient file path validation in the add_listing_action AJAX action in all versions up to, and including, 8.
- 9.8 Critical severity
Directorist: AI-Powered Business Directory…: Weak Password Recovery Mechanism for Forgotten Password
The Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 8.1. This is due to the directorist_generate_password_reset
- 8.8 High severity
The Directorist plugin for WordPress is vulnerable to an arbitrary user password reset in…
The Directorist plugin for WordPress is vulnerable to an arbitrary user password reset in versions up to, and including, 7.5.4. This is due to a lack of validation checks within login.php. This makes it possible for authenticated attackers, with subscriber-lev