Critical · 9.8 CVE-2026-22337 EUVD-2026-25814GHSA-73q4-rqf6-hhpm

WordPress Directorist Social Login plugin < 2.1.4 - Privilege Escalation vulnerability

Published Apr 27, 2026 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Directorist Product: Directorist Social Login

Description

Incorrect Privilege Assignment vulnerability in Directorist Directorist Social Login allows Privilege Escalation.This issue affects Directorist Social Login: from n/a before 2.1.4.

Affected products

Vendor	Product	Affected	Fixed
Directorist	Directorist Social Login	< 2.1.4	2.1.4

References

https://patchstack.com/database/wordpress/plugin/directorist-social-login/vulnerability/wordpress-directorist-social-login-plugin-2-1-1-privilege-escalation-vulnerability?_s_id=cve vdb-entry