Lucene search
K

226 matches found

Nuclei
Nuclei
added yesterday42 views

Directorist < 7.5.4 - Local File Inclusion

Directorist before 7.5.4 is susceptible to Local File Inclusion as it does not validate the file parameter when importing CSV files. id: CVE-2023-2252 info: name: Directorist 7.5.4 - Local File Inclusion author: r3Y3r53 severity: low description: | Directorist before 7.5.4 is susceptible to Local...

2.7CVSS6.6AI score0.09621EPSS
Exploits2References3
Nuclei
Nuclei
added yesterday21 views

WordPress Directorist <7.3.1 - Information Disclosure

WordPress Directorist plugin before 7.3.1 is susceptible to information disclosure. The plugin discloses the email address of all users in an AJAX action available to both unauthenticated and authenticated users. id: CVE-2022-2376 info: name: WordPress Directorist 7.3.1 - Information Disclosure...

5.3CVSS6.1AI score0.10489EPSS
Exploits2References5
RedhatCVE
RedhatCVE
added 2026/04/29 12:59 a.m.1 views

CVE-2026-22336

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Directorist Booking allows SQL Injection.This issue affects Directorist Booking: from n/a before 3.0.2...

9.3CVSS5.6AI score0.00043EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/04/29 12:59 a.m.2 views

CVE-2026-22337

Incorrect Privilege Assignment vulnerability in Directorist Directorist Social Login allows Privilege Escalation.This issue affects Directorist Social Login: from n/a before 2.1.4...

9.8CVSS5.2AI score0.00059EPSS
Exploits0References1
NVD
NVD
added 2026/04/27 11:16 a.m.2 views

CVE-2026-22337

Incorrect Privilege Assignment vulnerability in Directorist Directorist Social Login allows Privilege Escalation.This issue affects Directorist Social Login: from n/a before 2.1.4...

9.8CVSS0.00059EPSS
Exploits0References1
NVD
NVD
added 2026/04/27 11:16 a.m.0 views

CVE-2026-22336

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Directorist Booking allows SQL Injection.This issue affects Directorist Booking: from n/a before 3.0.2...

9.3CVSS0.00043EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/04/27 10:31 a.m.2 views

CVE-2026-22337 WordPress Directorist Social Login plugin < 2.1.4 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in Directorist Directorist Social Login allows Privilege Escalation.This issue affects Directorist Social Login: from n/a before 2.1.4...

9.8CVSS5.2AI score0.00059EPSS
Exploits0References1
EUVD
EUVD
added 2026/04/27 10:31 a.m.5 views

EUVD-2026-25814

Incorrect Privilege Assignment vulnerability in Directorist Directorist Social Login allows Privilege Escalation.This issue affects Directorist Social Login: from n/a before 2.1.4...

9.8CVSS5.2AI score0.00059EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/04/27 10:31 a.m.1 views

CVE-2026-22337

Incorrect Privilege Assignment vulnerability in Directorist Directorist Social Login allows Privilege Escalation.This issue affects Directorist Social Login: from n/a before 2.1.4...

9.8CVSS5.2AI score0.00059EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/04/27 10:31 a.m.27 views

CVE-2026-22337 WordPress Directorist Social Login plugin < 2.1.4 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in Directorist Directorist Social Login allows Privilege Escalation.This issue affects Directorist Social Login: from n/a before 2.1.4...

9.8CVSS0.00059EPSS
Exploits0References1
CVE
CVE
added 2026/04/27 10:31 a.m.5 views

CVE-2026-22337

CVE-2026-22337 is a vulnerability in the WordPress plugin Directorist Social Login (directorist-social-login) described as an Incorrect Privilege Assignment that enables Privilege Escalation. Public sources specify affected versions as before 2.1.4 (NVD) and up to 2.1.1/2.1.4 in various advisorie...

9.8CVSS5.2AI score0.00059EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/04/27 10:24 a.m.2 views

CVE-2026-22336

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Directorist Booking allows SQL Injection.This issue affects Directorist Booking: from n/a before 3.0.2...

9.3CVSS5.6AI score0.00043EPSS
Exploits0References2
EUVD
EUVD
added 2026/04/27 10:24 a.m.2 views

EUVD-2026-25813

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Directorist Booking allows SQL Injection.This issue affects Directorist Booking: from n/a before 3.0.2...

9.3CVSS5.6AI score0.00043EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/04/27 10:24 a.m.1 views

CVE-2026-22336 WordPress Directorist Booking plugin < 3.0.2 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Directorist Booking allows SQL Injection.This issue affects Directorist Booking: from n/a before 3.0.2...

9.3CVSS5.6AI score0.00043EPSS
Exploits0References1
CVE
CVE
added 2026/04/27 10:24 a.m.3 views

CVE-2026-22336

CVE-2026-22336 affects the WordPress plugin Directorist Booking. It exposes an unauthenticated SQL Injection in versions up to 2.4.1, arising from improper neutralization of input used in SQL commands. Impact per sources is high: potential data disclosure or manipulation with no user interaction ...

9.3CVSS5.6AI score0.00043EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/04/27 10:24 a.m.25 views

CVE-2026-22336 WordPress Directorist Booking plugin < 3.0.2 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Directorist Booking allows SQL Injection.This issue affects Directorist Booking: from n/a before 3.0.2...

9.3CVSS0.00043EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/04/27 12:0 a.m.3 views

WordPress plugin Directorist Booking SQL注入漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that extends the...

9.3CVSS5.9AI score0.00043EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/04/27 12:0 a.m.1 views

PT-2026-35391

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Directorist Booking allows SQL Injection.This issue affects Directorist Booking: from n/a before 3.0.2...

9.3CVSS5.6AI score0.00043EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/04/27 12:0 a.m.3 views

WordPress plugin Directorist Social Login 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

9.8CVSS5.8AI score0.00059EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/04/27 12:0 a.m.4 views

PT-2026-35392

Incorrect Privilege Assignment vulnerability in Directorist Directorist Social Login allows Privilege Escalation.This issue affects Directorist Social Login: from n/a before 2.1.4...

9.8CVSS5.2AI score0.00059EPSS
Exploits0References2
Rows per page
Query Builder