Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

Directorist: AI-Powered Business Directory, Listings & Classified Ads — Vulnerabilities & Security Advisories 8

All 8 CVE vulnerabilities found in Directorist: AI-Powered Business Directory, Listings & Classified Ads, with AI-generated Chinese analysis, references, and POCs.

Vendor: wpwax

CVE IDTitleCVSSSeverityPublished
CVE-2025-12174 Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings <= 8.5.2 - Missing Authorization to Authenticated (Subscriber+) Data Export and Slug Update CWE-862 6.5 Medium2025-11-19
CVE-2025-10488 Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings <= 8.4.8 - Authenticated (Subscriber+) Arbitrary File Move CWE-22 8.1 High2025-10-25
CVE-2025-2224 Directorist <= 8.2 - Missing Authorization to Unauthenticated Arbitrary Post Publishing CWE-862 5.3 Medium2025-03-25
CVE-2025-1570 Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings <= 8.1 - Privilege Escalation and Account Takeover via Weak OTP CWE-640 8.1 High2025-02-28
CVE-2024-12041 Directorist – AI-Powered WordPress Business Directory Plugin with Classified Ads Listings <= 8.0.12 - Unauthenticated User Information Exposure CWE-359 5.3 Medium2025-02-01
CVE-2024-1322 Directorist <= 7.8.4 - Missing Authorization to Unauthenticated Settings Change CWE-862 5.3 Medium2024-02-20
CVE-2023-1889 Directorist <= 7.5.4 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Post Deletion in listing_task CWE-639 6.5 Medium2023-06-09
CVE-2023-1888 Directorist <= 7.5.4 - Authenticated (Subscriber+) Arbitrary User Password Reset to Privilege Escalation CWE-20 8.8 High2023-06-09

All 8 known CVE vulnerabilities affecting Directorist: AI-Powered Business Directory, Listings & Classified Ads with full Chinese analysis, references, and POCs where available.