Skip to content
OpenAdvisories

Product · e-plugins

Lawyer Directory

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 7.1
    CVE-2026-28127

    WordPress Lawyer Directory plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e-plugins Lawyer Directory lawyer-directory allows Reflected XSS.This issue affects Lawyer Directory: from n/a through <= 1.3.2.

    e-plugins Lawyer Directory
  • High 7.3
    CVE-2025-69181

    WordPress Lawyer Directory plugin <= 1.3.4 - Broken Access Control vulnerability

    Missing Authorization vulnerability in e-plugins Lawyer Directory lawyer-directory allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Lawyer Directory: from n/a through <= 1.3.4.

    e-plugins Lawyer Directory
  • High 8.8
    CVE-2025-67966

    WordPress Lawyer Directory plugin <= 1.3.3 - Privilege Escalation vulnerability

    Incorrect Privilege Assignment vulnerability in e-plugins Lawyer Directory lawyer-directory allows Privilege Escalation.This issue affects Lawyer Directory: from n/a through <= 1.3.3.

    e-plugins Lawyer Directory
  • High 7.6
    CVE-2025-67967

    WordPress Lawyer Directory plugin <= 1.3.3 - Broken Access Control vulnerability

    Missing Authorization vulnerability in e-plugins Lawyer Directory lawyer-directory allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Lawyer Directory: from n/a through <= 1.3.3.

    e-plugins Lawyer Directory