Skip to content
Noroxi

Directorist: AI-Powered Business Directory, Listings & Classified Ads

directorist · plugin

Known security vulnerabilities for Directorist: AI-Powered Business Directory, Listings & Classified Ads. Find out in seconds which version runs on your site with WP Lens.

16 known vulnerabilities

2 critical · latest Jul 13, 2026

Vulnerabilities

  • CVE-2026-59518

    WordPress Directorist plugin <= 8.8.2 - PHP Object Injection vulnerability

    Critical 9.8

  • CVE-2025-1570

    Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings <= 8.1 - Privilege Escalation and Account Takeover via Weak OTP

    Critical 9.8

  • CVE-2023-41798

    WordPress Directorist Plugin <= 7.7.1 is vulnerable to CSV Injection

    High 8.8

  • CVE-2023-1888

    Directorist <= 7.5.4 - Authenticated (Subscriber+) Arbitrary User Password Reset to Privilege Escalation

    High 8.8

  • CVE-2025-10488

    Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings <= 8.4.8 - Authenticated (Subscriber+) Arbitrary File Move

    High 8.1

  • CVE-2025-68069

    WordPress Directorist plugin <= 8.6.6 - Broken Access Control vulnerability

    High 7.1

  • CVE-2025-12174

    Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings <= 8.5.2 - Missing Authorization to Authenticated (Subscriber+) Data Export and S

    Medium 6.5

  • CVE-2023-1889

    Directorist <= 7.5.4 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Post Deletion in listing_task

    Medium 6.5

  • CVE-2026-39509

    WordPress Directorist plugin <= 8.5.10 - Broken Access Control vulnerability

    Medium 5.3

  • CVE-2025-2224

    Directorist <= 8.2 - Missing Authorization to Unauthenticated Arbitrary Post Publishing

    Medium 5.3

  • CVE-2024-12041

    Directorist – AI-Powered WordPress Business Directory Plugin with Classified Ads Listings <= 8.0.12 - Unauthenticated User Information Exposure

    Medium 5.3

  • CVE-2024-33929

    WordPress Directorist plugin <= 7.8.6 - Broken Access Control vulnerability

    Medium 5.3

  • CVE-2024-1322

    Directorist <= 7.8.4 - Missing Authorization to Unauthenticated Settings Change

    Medium 5.3

  • CVE-2022-2046→ 7.2.3

    Directorist - Business Directory Plugin < 7.2.3 - Admin+ Arbitrary File Upload

    Medium 4.9

  • CVE-2025-64250

    WordPress Directorist plugin <= 8.6.6 - Open Redirection vulnerability

    Medium 4.7

  • CVE-2023-35052

    WordPress Directorist plugin <= 7.5.4 - Arbitrary Content Deletion vulnerability

    Medium 4.3

← Back to directory