Skip to content
OpenAdvisories

Vendor

Designinvento

13 known vulnerabilities.

Products

DirectoryPress 10 DirectoryPress – Business Directory And Classified Ad Listing 2 DirectoryPress Frontend 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 7.5
    CVE-2026-3489

    DirectoryPress – Business Directory And Classified Ad Listing <= 3.6.26 - Unauthenticated SQL Injection via 'packages'

    The DirectoryPress – Business Directory And Classified Ad Listing plugin for WordPress is vulnerable to SQL Injection via the 'packages' parameter in versions up to, and including, 3.6.26 due to insufficient escaping on the user supplied parameter and lack of…

    Designinvento DirectoryPress – Business Directory And Classified Ad Listing Web / CMS
  • High 7.1
    CVE-2024-49633

    WordPress DirectoryPress plugin <= 3.6.19 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Designinvento DirectoryPress directorypress allows Reflected XSS.This issue affects DirectoryPress: from n/a through <= 3.6.19.

    Designinvento DirectoryPress
  • High 8.5
    CVE-2024-38755

    WordPress DirectoryPress plugin <= 3.6.10 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Designinvento DirectoryPress allows SQL Injection.This issue affects DirectoryPress: from n/a through 3.6.10.

    Designinvento DirectoryPress
  • High 7.1
    CVE-2024-32567

    WordPress DirectoryPress plugin <= 3.6.7 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Designinvento DirectoryPress allows Reflected XSS.This issue affects DirectoryPress: from n/a through 3.6.7.

    Designinvento DirectoryPress