Latest vulnerabilities for "designinvento directorypress"

Where

Sort:

Designinvento DirectoryPressWordPress DirectoryPress plugin <= 3.6.26 - Sensitive Data Exposure vulnerability

Risk 22

Severity

4.3

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Designinvento DirectoryPress directorypress allows Retrieve Embedded Sensitive Data.This issue affects DirectoryPress: from n/a through <= 3.6.26.

First published (updated )

CVE-2026-39566

wordpress/directorypressWordPress DirectoryPress plugin <= 3.6.26 - Broken Access Control vulnerability

Risk 25

Severity

5.4

EPSS

0.04%

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

Missing Authorization vulnerability in Designinvento DirectoryPress directorypress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects DirectoryPress: from n/a through <= 3.6.26.

First published (updated )

CVE-2026-27387

Designinvento DirectoryPressWordPress DirectoryPress plugin <= 3.6.25 - Broken Access Control vulnerability

Risk 27

Severity

5.3

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

First published (updated )

CVE-2026-23548

Designinvento DirectoryPressWordPress DirectoryPress plugin <= 3.6.25 - Cross Site Scripting (XSS) vulnerability

Risk 46

Severity

6.5

XSS

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Designinvento DirectoryPress directorypress allows DOM-Based XSS.This issue affects DirectoryPress: from n/a through <= 3.6.25.

First published (updated )

CVE-2025-62967

Designinvento DirectoryPressWordPress DirectoryPress Plugin <= 3.6.22 - Cross Site Request Forgery (CSRF) vulnerability

Risk 24

Severity

5.4

EPSS

0.02%

CSRF

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L

Cross-Site Request Forgery (CSRF) vulnerability in designinvento DirectoryPress allows Cross Site Request Forgery. This issue affects DirectoryPress: from n/a through 3.6.19.

1 / 2

Source: NVD

First published (updated )

CVE-2025-32249

Designinvento Directorypress WordpressWordPress DirectoryPress plugin <= 3.6.19 - Cross Site Scripting (XSS) vulnerability

Risk 27

Severity

7.1

EPSS

0.03%

XSS

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Designinvento DirectoryPress directorypress allows Reflected XSS.This issue affects DirectoryPress: from n/a through <= 3.6.19.

First published (updated )

CVE-2024-49633

Designinvento DirectoryPressWordPress DirectoryPress plugin <= 3.6.2 - Unauthenticated Broken Access Control Vulnerability

Risk 86

Severity

9.8

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

Remedy

Update the WordPress DirectoryPress plugin to the latest available version (at least 3.6.3).

First published (updated )

CVE-2023-37967

Designinvento DirectoryPressWordPress DirectoryPress plugin <= 3.6.7 - Reflected Cross Site Scripting (XSS) vulnerability

Risk 36

Severity

7.1

EPSS

0.04%

XSS

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Designinvento DirectoryPress allows Reflected XSS.This issue affects DirectoryPress: from n/a through 3.6.7.

Remedy

Update to 3.6.8 or a higher version.

First published (updated )

CVE-2024-32567

Trending

Designinvento DirectoryPressWordPress DirectoryPress plugin <= 3.6.26 - Sensitive Data Exposure vulnerability

wordpress/directorypressWordPress DirectoryPress plugin <= 3.6.26 - Broken Access Control vulnerability

Designinvento DirectoryPressWordPress DirectoryPress plugin <= 3.6.25 - Broken Access Control vulnerability

Designinvento DirectoryPressWordPress DirectoryPress plugin <= 3.6.25 - Cross Site Scripting (XSS) vulnerability

Designinvento DirectoryPressWordPress DirectoryPress Plugin <= 3.6.22 - Cross Site Request Forgery (CSRF) vulnerability

Designinvento Directorypress WordpressWordPress DirectoryPress plugin <= 3.6.19 - Cross Site Scripting (XSS) vulnerability

Designinvento DirectoryPressWordPress DirectoryPress plugin <= 3.6.2 - Unauthenticated Broken Access Control Vulnerability

Remedy

Designinvento DirectoryPressWordPress DirectoryPress plugin <= 3.6.7 - Reflected Cross Site Scripting (XSS) vulnerability

Remedy

Company

Resources

Contact