Skip to content
OpenAdvisories

Vendor

Designinvento

13 known vulnerabilities.

Products

DirectoryPress 10 DirectoryPress – Business Directory And Classified Ad Listing 2 DirectoryPress Frontend 1
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-39566

    WordPress DirectoryPress plugin <= 3.6.26 - Sensitive Data Exposure vulnerability

    Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Designinvento DirectoryPress directorypress allows Retrieve Embedded Sensitive Data.This issue affects DirectoryPress: from n/a through <= 3.6.26.

    Designinvento DirectoryPress
  • Medium 5.4
    CVE-2026-27387

    WordPress DirectoryPress plugin <= 3.6.26 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Designinvento DirectoryPress directorypress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects DirectoryPress: from n/a through <= 3.6.26.

    Designinvento DirectoryPress
  • Medium 5.3
    CVE-2026-23548

    WordPress DirectoryPress plugin <= 3.6.25 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Designinvento DirectoryPress directorypress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects DirectoryPress: from n/a through <= 3.6.25.

    Designinvento DirectoryPress
  • Medium 6.5
    CVE-2025-62967

    WordPress DirectoryPress plugin <= 3.6.25 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Designinvento DirectoryPress directorypress allows DOM-Based XSS.This issue affects DirectoryPress: from n/a through <= 3.6.25.

    Designinvento DirectoryPress
  • Medium 5.4
    CVE-2025-32249

    WordPress DirectoryPress Plugin <= 3.6.22 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in Designinvento DirectoryPress directorypress allows Cross Site Request Forgery.This issue affects DirectoryPress: from n/a through <= 3.6.22.

    Designinvento DirectoryPress
  • Medium 4.3
    CVE-2024-10581

    DirectoryPress Frontend <= 2.7.9 - Cross-Site Request Forgery to Listing Status Update

    The DirectoryPress Frontend plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.7.9. This is due to missing or incorrect nonce validation on the dpfl_listingStatusChange() function. This makes it possible f…

    Designinvento DirectoryPress Frontend Web / CMS
  • Medium 5.4
    CVE-2024-10584

    DirectoryPress <= 3.6.16 - Authenticated (Author+) Stored Cross-Site Scripting

    The DirectoryPress – Business Directory And Classified Ad Listing plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 3.6.16 due to insufficient input sanitization and output escaping. T…

    Designinvento DirectoryPress – Business Directory And Classified Ad Listing Web / CMS
  • Medium 6.5
    CVE-2023-37967

    WordPress DirectoryPress plugin <= 3.6.2 - Unauthenticated Broken Access Control Vulnerability

    Missing Authorization vulnerability in Designinvento DirectoryPress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects DirectoryPress: from n/a through 3.6.2.

    Designinvento DirectoryPress