CVE-2025-52748: WordPress Directory Pro plugin <= 2.5.5 - Cross Site Scripting (XSS) Vulnerability

Q: Which Directory Pro installations are affected?

Directory Pro versions through 2.5.5 are affected. The available data does not identify a fixed version.

Q: What does an attacker need to exploit this issue?

The vector is network-accessible, requires low attack complexity, and does not require prior privileges. Exploitation does require user interaction, meaning a victim must interact with attacker-controlled content or a crafted request.

Q: What is the potential impact of successful exploitation?

Successful reflected XSS can affect confidentiality, integrity, and availability at a low level, and the impact scope can extend beyond the vulnerable component.

Published Oct 22, 2025

Updated

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e-plugins Directory Pro directory-pro allows Reflected XSS.This issue affects Directory Pro: from n/a through <= 2.5.5.

Affected Software

1 affected component

WordPress Directory Pro<=2.5.5

Event History

Oct 22, 2025

CVE Published

via MITRE·02:32 PM

Data Sourced

via MITRE·02:32 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·03:15 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Which Directory Pro installations are affected?

Directory Pro versions through 2.5.5 are affected. The available data does not identify a fixed version.

What does an attacker need to exploit this issue?

The vector is network-accessible, requires low attack complexity, and does not require prior privileges. Exploitation does require user interaction, meaning a victim must interact with attacker-controlled content or a crafted request.

What is the potential impact of successful exploitation?

Successful reflected XSS can affect confidentiality, integrity, and availability at a low level, and the impact scope can extend beyond the vulnerable component.

CVE-2025-52748: WordPress Directory Pro plugin <= 2.5.5 - Cross Site Scripting (XSS) Vulnerability

Affected Software

Event History

Frequently Asked Questions

Which Directory Pro installations are affected?

What does an attacker need to exploit this issue?

What is the potential impact of successful exploitation?

Company

Resources

Contact

Frequently Asked Questions

Which Directory Pro installations are affected?

What does an attacker need to exploit this issue?

What is the potential impact of successful exploitation?