Extension WordPress
Vulnérabilités Directorist: AI-Powered Business Directory, Listings & Classified Ads, page 2
Cette page rassemble les failles publiées pour Directorist: AI-Powered Business Directory, Listings & Classified Ads, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Directorist: AI-Powered Business Directory, Listings & Classified Ads
23 fiches
Directorist – WordPress Business Directory Plugin with Classified Ads Listings <= 7.2.3 – Missing Authorization
The Directorist – WordPress Business Directory Plugin with Classified Ads Listings plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the send_announcement() function in versions up to, and including, 7.2.3. This makes…
*-7.2.3
7.3.0
26/07/2022
Directorist <= 7.2.2 – Authenticated (Admin+) Arbitrary File Upload
The Directorist plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation via the atbdp_download_file() AJAX action in versions up to, and including, 7.2.2. This makes it possible for authenticated attackers with administrative…
*-7.2.2
7.2.3
18/07/2022
Directorist <= 7.0.6.1 – Cross-Site Request Forgery to Arbitrary File Upload
The Directorist WordPress plugin before 7.0.6.2 was vulnerable to Cross-Site Request Forgery to Remote File Upload leading to arbitrary PHP shell uploads in the wp-content/plugins directory.
*-7.0.6.1
7.0.6.2
16/11/2021
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.