Unknown Directorist vulnerabilities

3 vulnerabilities

Known vulnerabilities in Unknown Directorist, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.8CVE-2022-3930unknowndirectorist+2
EPSS score
0.64%
The Directorist WordPress plugin before 7.4.2.2 suffers from an IDOR vulnerability which an attacker can exploit to change the password of arbitrary users instead of his own.6.5CVE-2022-3961unknowndirectorist+2
EPSS score
0.75%
The Directorist WordPress plugin before 7.4.4 does not prevent users with low privileges (like subscribers) from accessing sensitive system information.7.2CVE-2023-2252unknowndirectorist+2
EPSS score
1.34%
The Directorist WordPress plugin before 7.5.4 is vulnerable to Local File Inclusion as it does not validate the file parameter when importing CSV files.