Skip to content
OpenAdvisories

Product · wpWax

Directorist

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-122661

    WordPress Directorist plugin <= 8.10.7 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpWax Directorist directorist allows Stored XSS.This issue affects Directorist: from n/a through 8.10.7.

    wpWax Directorist
  • Medium 6.5
    CVE-2026-119497

    WordPress Directorist plugin <= 8.10.6 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpWax Directorist directorist allows Stored XSS.This issue affects Directorist: from n/a through 8.10.6.

    wpWax Directorist
  • Medium 5.3
    CVE-2026-39509

    WordPress Directorist plugin <= 8.5.10 - Broken Access Control vulnerability

    Missing Authorization vulnerability in wpWax Directorist directorist allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Directorist: from n/a through <= 8.5.10.

    wpWax Directorist
  • Medium 4.7
    CVE-2025-64250

    WordPress Directorist plugin <= 8.6.6 - Open Redirection vulnerability

    URL Redirection to Untrusted Site ('Open Redirect') vulnerability in wpWax Directorist directorist allows Phishing.This issue affects Directorist: from n/a through <= 8.6.6.

    wpWax Directorist
  • Medium 5.3
    CVE-2024-33929

    WordPress Directorist plugin <= 7.8.6 - Broken Access Control vulnerability

    Missing Authorization vulnerability in wpWax Directorist.This issue affects Directorist: from n/a through 7.8.6.

    wpWax Directorist