Advisories · Technology
wpwax Directorist: AI-Powered Business Directory, Listings & Classified Ads.
Every CVE that names wpwax Directorist: AI-Powered Business Directory, Listings & Classified Ads among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.4 Medium
Directorist: AI-Powered Business Directory, Listings & Classified Ads <= 8.10.2.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'phone' Listing Field
- wpwax Directorist: AI-Powered Business Directory, Listings & Classified Ads
- Cross-site scripting (XSS)
- CVSS 8.1 High
Directorist: AI-Powered Business Directory, Listings & Classified Ads <= 8.10.2.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Listing Deletion via 'listing_id' Parameter
- wpwax Directorist: AI-Powered Business Directory, Listings & Classified Ads
- Broken access control
- CVSS 6.5 Medium
Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings <= 8.5.2 - Missing Authorization to Authenticated (Subscriber+) Data Export and Slug Update
- wpwax Directorist: AI-Powered Business Directory, Listings & Classified Ads
- Broken access control
- CVSS 8.1 High
Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings <= 8.4.8 - Authenticated (Subscriber+) Arbitrary File Move
- wpwax Directorist: AI-Powered Business Directory, Listings & Classified Ads
- Path traversal
- CVSS 5.3 Medium
Directorist <= 8.2 - Missing Authorization to Unauthenticated Arbitrary Post Publishing
- wpwax Directorist: AI-Powered Business Directory, Listings & Classified Ads
- Broken access control
- CVSS 8.1 High
Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings <= 8.1 - Privilege Escalation and Account Takeover via Weak OTP
- wpwax Directorist: AI-Powered Business Directory, Listings & Classified Ads
- CWE-640
- CVSS 5.3 Medium
Directorist – AI-Powered WordPress Business Directory Plugin with Classified Ads Listings <= 8.0.12 - Unauthenticated User Information Exposure
- wpwax Directorist: AI-Powered Business Directory, Listings & Classified Ads
- Information disclosure
- CVSS 5.3 Medium
Directorist <= 7.8.4 - Missing Authorization to Unauthenticated Settings Change
- wpwax Directorist: AI-Powered Business Directory, Listings & Classified Ads
- Broken access control
- CVSS 6.5 Medium
Directorist <= 7.5.4 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Post Deletion in listing_task
- wpwax Directorist: AI-Powered Business Directory, Listings & Classified Ads
- Broken access control
- CVSS 8.8 High
Directorist <= 7.5.4 - Authenticated (Subscriber+) Arbitrary User Password Reset to Privilege Escalation
- wpwax Directorist: AI-Powered Business Directory, Listings & Classified Ads
- CWE-20