Approved changes feed: RSS · Atom

cpe:2.3:a:e-plugins:institutions_directory:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorE Plugins (4ef66073-3f84-5bdb-a7d0-b721423839e8)
ProductInstitutions Directory (3754e965-3475-5a3d-88da-2fa9cd2daa16)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-69184 vulnerable 2026-06-03 15:11:04.676669 WordPress Institutions Directory plugin <= 1.3.4 - Broken Access Control vulnerability
HIGH (7.3)
Missing Authorization vulnerability in e-plugins Institutions Directory institutions-directory allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Institutions Directory: from n/a through <= 1.3.4.
Published: 2026-01-22T16:52:29.027Z
Updated: 2026-04-28T20:43:52.334Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-69182 vulnerable 2026-06-03 15:11:04.675979 WordPress Institutions Directory plugin <= 1.3.4 - Privilege Escalation vulnerability
HIGH (8.8)
Incorrect Privilege Assignment vulnerability in e-plugins Institutions Directory institutions-directory allows Privilege Escalation.This issue affects Institutions Directory: from n/a through <= 1.3.4.
Published: 2026-01-22T16:52:28.620Z
Updated: 2026-04-28T20:43:30.662Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-68058 vulnerable 2026-06-03 15:11:02.794939 WordPress Institutions Directory plugin <= 1.3..4 - Broken Access Control vulnerability
HIGH (7.6)
Missing Authorization vulnerability in e-plugins Institutions Directory institutions-directory allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Institutions Directory: from n/a through <= 1.3..4.
Published: 2026-01-22T16:52:06.554Z
Updated: 2026-04-28T16:14:27.820Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-58638 vulnerable 2026-06-03 15:06:22.231898 WordPress Institutions Directory Plugin <= 1.3.3 - Cross Site Scripting (XSS) Vulnerability
HIGH (7.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e-plugins Institutions Directory institutions-directory allows Reflected XSS.This issue affects Institutions Directory: from n/a through <= 1.3.3.
Published: 2025-11-06T15:54:28.161Z
Updated: 2026-04-28T20:14:33.603Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.