SecAlerts
D

Directorist

Security Risk Profile

39
/100
low

Security Risk Score

Comprehensive risk assessment based on 10 vulnerabilities, EPSS scores, exploitation status, and remediation availability.

📅 Data spans from February 20, 2024 to present

10
Total CVEs
3
Critical+High
0
Exploited
3
Unpatched

Threat Assessment

Avg CVSS
6.2
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
3
Critical/High
Risk Level
39/100
low
🆕 1Fresh (<7d)📈 2 in Last 30 Days

Severity Distribution

Critical
1
High
2
Medium
6
Low
1

Exploit Likelihood

>50% chance
0
20-50%
0
5-20%
0
<5%
0

Age Distribution

Common Weaknesses (CWE)

1
Path Traversal
2

Most Affected Products

1. wpWax Directorist Wordpress3
2. Directorist Directorist2
3. Directorist AI-Powered Business Directory Plugin2
4. Directorist Directorist: AI-Powered Business Directory, Listings & Classified Ads1
5. Directorist Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin1

Recent Vulnerabilities

See more →
CVE-2026-17092
CVSS 8.1high

Directorist: AI-Powered Business Directory, Listings & Classified Ads <= 8.10.2.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Listing Deletion via 'listing_id' Parameter

Oct 14, 2026🔧 No Patch
CVE-2026-84150
CVSS 5.4medium

Directorist < 8.9.5 - Subscriber+ Cross-User Favorites Read and Write via REST Favorites Endpoint

Sep 23, 2026🔧 No Patch
CVE-2026-84066
CVSS 3.1low

Directorist < 8.9 - Subscriber+ Arbitrary Post Meta Write via atbdp_post_attachment_upload

Sep 4, 2026🔧 No Patch
CVE-2026-77757
CVSS 5.4medium

Directorist 8.5 - 8.9.2 - Subscriber+ Arbitrary Image Move via REST v2 Listing Submission

Aug 26, 2026🔧 No Patch
CVE-2025-12174
CVSS 6.5medium

Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings <= 8.5.2 - Missing Authorization to Authenticated (Subscriber+) Data Export and Slug Update

Nov 19, 2025🔧 No Patch
CVE-2025-10488
CVSS 8.1high

Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings <= 8.4.8 - Authenticated (Subscriber+) Arbitrary File Move

Oct 25, 2025🔧 No Patch
CVE-2025-2224
CVSS 5.3medium

Directorist <= 8.2 - Missing Authorization to Unauthenticated Arbitrary Post Publishing

Mar 25, 2025🔧 No Patch
CVE-2025-1570
CVSS 9.8critical

Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings <= 8.1 - Privilege Escalation and Account Takeover via Weak OTP

Feb 28, 2025🔧 No Patch
CVE-2024-12041
CVSS 5.3medium

Directorist – AI-Powered WordPress Business Directory Plugin with Classified Ads Listings <= 8.0.12 - Unauthenticated User Information Exposure

Feb 1, 2025
CVE-2024-1322
CVSS 5.3medium

Directorist <= 7.8.4 - Missing Authorization to Unauthenticated Settings Change

Feb 20, 2024

Monitor Directorist in Real-Time

Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.

Powered bySecAlerts

Monitor Your Software Stack in Real-Time

Get instant alerts when vulnerabilities are discovered in your software stack. Stay ahead of security threats with SecAlerts.

© 2026 SecAlerts Pty Ltd. All rights reserved.

Directorist Security Vulnerabilities & Risk Score | 10 CVEs | SecAlerts - SecAlerts