Approved changes feed: RSS · Atom

cpe:2.3:a:unknown:directorist:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUnknown (668ca391-a6cc-5e33-879b-83885214de33)
ProductDirectorist (7bba375b-83eb-51fd-9e27-cdc5b8e6afe1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-2252 vulnerable 2026-06-08 06:02:41.691818 Directorist < 7.5.4 - Admin+ LFI
The Directorist WordPress plugin before 7.5.4 is vulnerable to Local File Inclusion as it does not validate the file parameter when importing CSV files.
Published: 2024-01-16T15:55:41.055Z
Updated: 2025-06-02T15:09:55.739Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-3961 vulnerable 2026-06-08 05:48:22.705600 Directorist < 7.4.4 - Subscriber+ Sensitive Information Disclosure
The Directorist WordPress plugin before 7.4.4 does not prevent users with low privileges (like subscribers) from accessing sensitive system information.
Published: 2022-12-19T13:41:45.474Z
Updated: 2025-04-17T13:45:17.509Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-3930 vulnerable 2026-06-08 05:48:22.652455 Directorist < 7.4.2.2 - Subscriber+ Arbitrary User Password Update via IDOR
The Directorist WordPress plugin before 7.4.2.2 suffers from an IDOR vulnerability which an attacker can exploit to change the password of arbitrary users instead of his own.
Published: 2022-12-12T17:54:51.323Z
Updated: 2025-04-22T17:50:22.802Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.