CVE-2023-2252 Directorist < 7.5.4 - Admin+ LFI

2024-01-1615:55:41

WPScan

www.cve.org

directorist

wordpress

local file inclusion

csv filesvalidation

cve-2023-2252

4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

42.3%

JSON

The Directorist WordPress plugin before 7.5.4 is vulnerable to Local File Inclusion as it does not validate the file parameter when importing CSV files.

CNA Affected

[
  {
    "vendor": "Unknown",
    "product": "Directorist",
    "versions": [
      {
        "status": "affected",
        "versionType": "semver",
        "version": "0",
        "lessThan": "7.5.4"
      }
    ],
    "defaultStatus": "unaffected",
    "collectionURL": "https://wordpress.org/plugins"
  }
]