Skip to content
OpenAdvisories
Medium · 5.1 CVE-2023-41798 EUVD-2023-46290GHSA-gpjf-v934-73g5

WordPress Directorist Plugin <= 7.7.1 is vulnerable to CSV Injection

Published Nov 7, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: wpWax Product: Directorist – WordPress Business Directory Plugin with Classified Ads Listings Category: Web / CMS

Description

Improper Neutralization of Formula Elements in a CSV File vulnerability in wpWax Directorist – WordPress Business Directory Plugin with Classified Ads Listing.This issue affects Directorist – WordPress Business Directory Plugin with Classified Ads Listings: from n/a through 7.7.1.

Affected products

VendorProductAffectedFixed
wpWax Directorist – WordPress Business Directory Plugin with Classified Ads Listings ≤ 7.7.1 —

References