Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

Name Directory — Vulnerabilities & Security Advisories 12

All 12 CVE vulnerabilities found in Name Directory, with AI-generated Chinese analysis, references, and POCs.

Vendor: J. Peters

CVE ID Title CVSS Severity Published
CVE-2026-104726 Name Directory <= 1.34.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'dir' Shortcode Attribute CWE-79 6.4 Medium 2026-10-16
CVE-2026-104396 WordPress Name Directory plugin <= 1.34.2 - Cross Site Scripting (XSS) vulnerability CWE-79 6.5 Medium 2026-10-05
CVE-2026-104397 WordPress Name Directory plugin <= 1.34.2 - Arbitrary Shortcode Execution vulnerability CWE-862 5.3 Medium 2026-10-05
CVE-2026-3178 Name Directory <= 1.32.1 - Unauthenticated Stored Cross-Site Scripting via 'name_directory_name' CWE-79 7.2 High 2026-03-11
CVE-2026-1866 Name Directory <= 1.32.0 - Unauthenticated Stored Cross-Site Scripting via Double HTML-Entity Encoding in Submission Form CWE-79 7.2 High 2026-02-10
CVE-2025-15283 Name Directory <= 1.30.3 - Unauthenticated Stored Cross-Site Scripting via Multiple Parameters CWE-79 7.2 High 2026-01-14
CVE-2025-39454 WordPress Name Directory plugin <= 1.30.0 - Broken Access Control vulnerability CWE-862 4.3 Medium 2025-05-19
CVE-2024-43938 WordPress Name Directory plugin <= 1.29.0 - Reflected Cross Site Scripting (XSS) vulnerability CWE-79 7.1 Medium 2024-09-17
CVE-2023-22692 WordPress Name Directory Plugin <= 1.27.1 is vulnerable to Cross Site Request Forgery (CSRF) CWE-352 4.3 Medium 2023-05-22
CVE-2022-2072 Name Directory < 1.25.3 - Reflected Cross-Site Scripting CWE-79 6.1 - 2022-07-25
CVE-2022-2071 Name Directory < 1.25.4 - Stored Cross-Site Scripting via CSRF CWE-352 6.1 - 2022-07-25
CVE-2021-20652 Wordpress name-directory Plugin 跨站请求伪造漏洞 8.8 - 2021-02-05

All 12 known CVE vulnerabilities affecting Name Directory with full Chinese analysis, references, and POCs where available.