WordPress directorist has 13 known advisories in the phpwarden feed. Feed 2026.10.29.1, updated 2026-10-28.
| CVE | Title | Severity | CVSS | Affected | Fixed in |
|---|---|---|---|---|---|
| CVE-2022-2376 | The Directorist WordPress plugin before 7.3.1 discloses the email address of all users in an AJAX action available to both unauthenticated a | medium | 5.3 | <7.3.1 | 7.3.1 |
| CVE-2023-2252 | The Directorist WordPress plugin before 7.5.4 is vulnerable to Local File Inclusion as it does not validate the file parameter when importin | low | 2.7 | <7.5.4 | 7.5.4 |
| CVE-2022-2046 | The Directorist WordPress plugin before 7.2.3 allows administrators to download other plugins from the same vendor directly to the site, but | medium | 4.9 | <7.2.3 | 7.2.3 |
| CVE-2023-1888 | The Directorist plugin for WordPress is vulnerable to an arbitrary user password reset in versions up to, and including, 7.5.4. This is due | high | 8.8 | <=7.5.4 | – |
| CVE-2021-24981 | The Directorist WordPress plugin before 7.0.6.2 was vulnerable to Cross-Site Request Forgery to Remote File Upload leading to arbitrary PHP | high | 7.5 | <7.0.6.2 | 7.0.6.2 |
| CVE-2022-3961 | The Directorist WordPress plugin before 7.4.4 does not prevent users with low privileges (like subscribers) from accessing sensitive system | medium | 6.5 | <7.4.4 | 7.4.4 |
| CVE-2022-3930 | The Directorist WordPress plugin before 7.4.2.2 suffers from an IDOR vulnerability which an attacker can exploit to change the password of | medium | 6.5 | <7.4.2.2 | 7.4.2.2 |
| CVE-2023-1889 | The Directorist plugin for WordPress is vulnerable to an Insecure Direct Object Reference in versions up to, and including, 7.5.4. This is d | medium | 6.5 | <=7.5.4 | – |
| CVE-2023-41798 | Improper Neutralization of Formula Elements in a CSV File vulnerability in wpWax Directorist – WordPress Business Directory Plugin with Clas | medium | 5.1 | <=7.7.1 | – |
| CVE-2024-1322 | The Directorist – WordPress Business Directory Plugin with Classified Ads Listings plugin for WordPress is vulnerable to unauthorized modifi | medium | 5.3 | <7.8.5 | 7.8.5 |
| CVE-2025-1570 | The Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings plugin for WordPress is vulnerable to privilege escalatio | high | 8.1 | <8.2 | 8.2 |
| CVE-2024-12041 | The Directorist: AI-Powered WordPress Business Directory Plugin with Classified Ads Listings plugin for WordPress is vulnerable to Informati | medium | 5.3 | <8.1 | 8.1 |
| CVE-2022-2377 | The Directorist WordPress plugin before 7.3.0 does not have authorisation and CSRF checks in an AJAX action, allowing any authenticated user | medium | 4.3 | <7.3.0 | 7.3.0 |
Find out in one command. phpwarden checks your WordPress install against this advisory and 20,000+ others, ranked by real-world exploitation (CISA KEV + EPSS). Free, offline, open data.
# one-time install pip install phpwarden # then phpwarden wordpress /var/www/html
Or keep it checked automatically with the GitHub Action or a nightly cron; see WordPress docs.
Install docs How findings are ranked