Medium
CVE-2026-77766
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 35
Reset filters
Medium
CVE-2026-84046
Directorist <= 8.9.4 - Authenticated (Subscriber+) Server-Side Request Forgery
Medium
CVE-2026-84027
Directorist 8.9.1 - 8.9.4 - Missing Authorization
Medium
CVE-2026-84026
Directorist 8.1 - 8.9.4 - Unauthenticated Information Exposure
Medium
CVE-2026-84098
Directorist 3.1.0 - 8.9.4 - Missing Authorization
Medium
CVE-2026-84150
Directorist <= 8.9.4 - Authenticated (Subscriber+) Insecure Direct Object Reference
Medium
CVE-2026-84066
Directorist: AI-Powered Business Directory, Listings & Classified Ads < 8.9 - Authenticated (Subscriber+) Insecure Direct Object Reference
Medium
CVE-2026-77757
Directorist: AI-Powered Business Directory, Listings & Classified Ads 8.5 - 8.9.2 - Authenticated (Subscriber+) Arbitrary Image Move
High
CVE-2026-59518
Directorist: AI-Powered Business Directory, Listings & Classified Ads <= 8.8.2 - Authenticated (Subscriber+) PHP Object Injection
Medium
CVE-2026-49073
Booking (Reservation & Appointment) <= 3.0.3 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2026-39509
Directorist <= 8.5.10 - Missing Authorization
Medium
CVE-2025-68069
Directorist <= 8.6.6 - Missing Authorization
Critical
CVE-2026-22337
Directorist Social Login <= 2.1.1 - Unauthenticated Privilege Escalation
High
CVE-2026-22336
Directorist Booking <= 2.4.1 - Unauthenticated SQL Injection
Medium
CVE-2025-64250
Directorist <= 8.6.6 - Unauthenticated Open Redirect
Medium
CVE-2025-12174
Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings <= 8.5.2 - Missing Authorization to Authenticated (Subscriber+) Data Export and Slug Update
High
CVE-2025-10488
Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings <= 8.4.8 - Authenticated (Subscriber+) Arbitrary File Move
Medium
CVE-2025-31857
Directorist AddonsKit for Elementor <= 1.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-2224
Directorist <= 8.2 - Missing Authorization to Unauthenticated Arbitrary Post Publishing
High
CVE-2025-1570
Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings <= 8.1 - Privilege Escalation and Account Takeover via Weak OTP
Medium
CVE-2024-12041
Directorist – AI-Powered WordPress Business Directory Plugin with Classified Ads Listings <= 8.0.12 - Unauthenticated User Information Exposure
Medium
CVE-2024-33929
Directorist <= 7.8.6 - Missing Authorization
Medium
CVE-2024-1322
Directorist <= 7.8.4 - Missing Authorization to Unauthenticated Settings Change
Low
CVE-2023-41798
Directorist <= 7.7.1 - CSV Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.