Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

DirectoryPress — Vulnerabilities & Security Advisories 9

All 9 CVE vulnerabilities found in DirectoryPress, with AI-generated Chinese analysis, references, and POCs.

Vendor: Designinvento

CVE IDTitleCVSSSeverityPublished
CVE-2026-39566 WordPress DirectoryPress plugin <= 3.6.26 - Sensitive Data Exposure vulnerability CWE-497 7.5AIHighAI2026-04-08
CVE-2026-27387 WordPress DirectoryPress plugin <= 3.6.26 - Broken Access Control vulnerability CWE-862 8.1AIHighAI2026-02-19
CVE-2026-23548 WordPress DirectoryPress plugin <= 3.6.25 - Broken Access Control vulnerability CWE-862 5.3 Medium2026-02-19
CVE-2025-62967 WordPress DirectoryPress plugin <= 3.6.25 - Cross Site Scripting (XSS) vulnerability CWE-79 6.1AIMediumAI2025-10-27
CVE-2025-32249 WordPress DirectoryPress Plugin <= 3.6.22 - Cross Site Request Forgery (CSRF) vulnerability CWE-352 5.4 Medium2025-04-04
CVE-2024-49633 WordPress DirectoryPress plugin <= 3.6.19 - Cross Site Scripting (XSS) vulnerability CWE-79 7.1 High2025-01-07
CVE-2023-37967 WordPress DirectoryPress plugin <= 3.6.2 - Unauthenticated Broken Access Control Vulnerability CWE-862 6.5 Medium2024-12-13
CVE-2024-38755 WordPress DirectoryPress plugin <= 3.6.10 - SQL Injection vulnerability CWE-89 8.5 High2024-07-22
CVE-2024-32567 WordPress DirectoryPress plugin <= 3.6.7 - Reflected Cross Site Scripting (XSS) vulnerability CWE-79 7.1 High2024-04-18

All 9 known CVE vulnerabilities affecting DirectoryPress with full Chinese analysis, references, and POCs where available.