VendorsDesigninventodirectorypressall versions
Vulnerabilities

Designinvento DirectoryPress

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

6CVEs
CVE-2023-37967
WordPress DirectoryPress plugin <= 3.6.2 - Unauthenticated Broken Access Control Vulnerability
Published 2024-12-13 · Modified
9.8EPSS 0.007
CVE-2024-38755
WordPress DirectoryPress plugin <= 3.6.10 - SQL Injection vulnerability
Published 2024-07-22 · Modified
8.8EPSS 0.007
CVE-2024-32567
WordPress DirectoryPress plugin <= 3.6.7 - Reflected Cross Site Scripting (XSS) vulnerability
Published 2024-04-18 · Modified
7.1EPSS 0.004
CVE-2024-49633
WordPress DirectoryPress plugin <= 3.6.19 - Cross Site Scripting (XSS) vulnerability
Published 2025-01-07 · Modified
7.1EPSS 0.003
CVE-2024-10584
DirectoryPress <= 3.6.16 - Authenticated (Author+) Stored Cross-Site Scripting
Published 2024-12-24 · Analyzed
5.4EPSS 0.003
CVE-2024-10581
DirectoryPress Frontend <= 2.7.9 - Cross-Site Request Forgery to Listing Status Update
Published 2025-02-15 · Analyzed
4.3EPSS 0.002