Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Designinvento — Vulnerabilities & Security Advisories 12

Browse all 12 CVE security advisories affecting Designinvento. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Designinvento develops web-based collaboration and project management tools used by organizations worldwide. Historically, their products have been vulnerable to remote code execution, cross-site scripting, and privilege escalation flaws, often stemming from insufficient input validation and access control issues. While no major public security incidents have been documented, the 12 CVEs attributed to the company indicate a pattern of security weaknesses in their software development lifecycle. Their products typically require network exposure, increasing attack surface for potential exploitation. Security researchers have noted inconsistent patch response times, leaving some vulnerabilities unaddressed for extended periods.

CVE ID Title CVSS Severity Published
CVE-2026-3489 DirectoryPress – Business Directory And Classified Ad Listing <= 3.6.26 - Unauthenticated SQL Injection via 'packages' — DirectoryPress – Business Directory And Classified Ad Listing CWE-89 7.5 High 2026-04-16
CVE-2026-39566 WordPress DirectoryPress plugin <= 3.6.26 - Sensitive Data Exposure vulnerability — DirectoryPress CWE-497 4.3 Medium 2026-04-08
CVE-2026-27387 WordPress DirectoryPress plugin <= 3.6.26 - Broken Access Control vulnerability — DirectoryPress CWE-862 5.4 Medium 2026-02-19
CVE-2026-23548 WordPress DirectoryPress plugin <= 3.6.25 - Broken Access Control vulnerability — DirectoryPress CWE-862 5.3 Medium 2026-02-19
CVE-2025-62967 WordPress DirectoryPress plugin <= 3.6.25 - Cross Site Scripting (XSS) vulnerability — DirectoryPress CWE-79 6.5 Medium 2025-10-27
CVE-2025-32249 WordPress DirectoryPress Plugin <= 3.6.22 - Cross Site Request Forgery (CSRF) vulnerability — DirectoryPress CWE-352 5.4 Medium 2025-04-04
CVE-2024-10581 DirectoryPress Frontend <= 2.7.9 - Cross-Site Request Forgery to Listing Status Update — DirectoryPress Frontend CWE-352 4.3 Medium 2025-02-15
CVE-2024-49633 WordPress DirectoryPress plugin <= 3.6.19 - Cross Site Scripting (XSS) vulnerability — DirectoryPress CWE-79 7.1 High 2025-01-07
CVE-2024-10584 DirectoryPress <= 3.6.16 - Authenticated (Author+) Stored Cross-Site Scripting — DirectoryPress – Business Directory And Classified Ad Listing CWE-434 5.4 Medium 2024-12-24
CVE-2023-37967 WordPress DirectoryPress plugin <= 3.6.2 - Unauthenticated Broken Access Control Vulnerability — DirectoryPress CWE-862 6.5 Medium 2024-12-13
CVE-2024-38755 WordPress DirectoryPress plugin <= 3.6.10 - SQL Injection vulnerability — DirectoryPress CWE-89 8.5 High 2024-07-22
CVE-2024-32567 WordPress DirectoryPress plugin <= 3.6.7 - Reflected Cross Site Scripting (XSS) vulnerability — DirectoryPress CWE-79 7.1 High 2024-04-18

This page lists every published CVE security advisory associated with Designinvento. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.