Directorist – Wordpress Business Directory Plugin With Classified Ads Listings
Approved changes feed: RSS · Atom
cpe:2.3:a:unknown:directorist_–_wordpress_business_directory_plugin_with_classified_ads_listings:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Unknown (668ca391-a6cc-5e33-879b-83885214de33) |
|---|---|
| Product | Directorist – Wordpress Business Directory Plugin With Classified Ads Listings (b1c2bd85-bf1d-57b3-b392-2b9cecf0b538) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-2377 |
vulnerable | 2026-06-08 05:43:35.426618 |
Directorist < 7.3.0 - Subscriber+ Arbitrary E-mail Sending
The Directorist WordPress plugin before 7.3.0 does not have authorisation and CSRF checks in an AJAX action, allowing any authenticated users to send arbitrary emails on behalf of the blog
Published: 2022-08-22T15:02:09.000Z
Updated: 2024-08-03T00:32:09.474Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-2376 |
vulnerable | 2026-06-08 05:43:35.425467 |
Directorist < 7.3.1 - Unauthenticated Email Address Disclosure
The Directorist WordPress plugin before 7.3.1 discloses the email address of all users in an AJAX action available to both unauthenticated and any authenticated users
Published: 2022-09-05T12:35:19.000Z
Updated: 2024-08-03T00:32:09.699Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-2046 |
vulnerable | 2026-06-08 05:42:50.142398 |
Directorist - Business Directory Plugin < 7.2.3 - Admin+ Arbitrary File Upload
The Directorist WordPress plugin before 7.2.3 allows administrators to download other plugins from the same vendor directly to the site, but does not check the URL domain it gets the zip files from. This could allow administrators to run code on the server, which is a problem in multisite configurations.
Published: 2022-08-08T13:46:03.000Z
Updated: 2024-08-03T00:24:43.957Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.