Lucene search
+L

6 matches found

NVD
NVD
•added 2026/10/14 4:18 a.m.•6 views

CVE-2026-100185

The Directorist: AI-Powered Business Directory, Listings & Classified Ads plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'phone' Listing Field in all versions up to, and including, 8.10.2.1 due to insufficient input sanitization and output escaping. This makes it possible f...

6.4CVSS0.00252EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/10/14 3:40 a.m.•8 views

EUVD-2026-100796

The Directorist: AI-Powered Business Directory, Listings & Classified Ads plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'phone' Listing Field in all versions up to, and including, 8.10.2.1 due to insufficient input sanitization and output escaping. This makes it possible f...

6.4CVSS6AI score0.00252EPSS
SaveExploits0References5
CVE
CVE
•added 2026/10/14 3:40 a.m.•10 views

CVE-2026-100185

The Directorist: AI-Powered Business Directory, Listings & Classified Ads plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 8.10.2.1 . The root cause is insufficient input sanitization and output escaping within the 'phone' Listing Field ....

6.4CVSS6AI score0.00252EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/10/14 3:40 a.m.•28 views

CVE-2026-100185 Directorist: AI-Powered Business Directory, Listings & Classified Ads <= 8.10.2.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'phone' Listing Field

The Directorist: AI-Powered Business Directory, Listings & Classified Ads plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'phone' Listing Field in all versions up to, and including, 8.10.2.1 due to insufficient input sanitization and output escaping. This makes it possible f...

6.4CVSS0.00252EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/10/14 12:00 a.m.•5 views

PT-2026-113612

The Directorist: AI-Powered Business Directory, Listings & Classified Ads plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'phone' Listing Field in all versions up to, and including, 8.10.2.1 due to insufficient input sanitization and output escaping. This makes it possible f...

6.4CVSS6AI score0.00252EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2021/06/01 12:00 a.m.•5 views

PT-2021-15858

Name of the Vulnerable Software and Affected Versions The Bello - Directory & Listing WordPress theme versions prior to 1.6.0 Description The issue arises from the lack of sanitization of certain parameters before they are used in SQL statements, leading to SQL Injection issues. The parameters bt...

9.8CVSS0.66576EPSS
SaveExploits2References4
Rows per page
Query Builder