Input validation vulnerability in Directorist – WordPress Business Directory Plugin with Classified Ads Listings 7.5.3

The Directorist for WordPress is a website plugin that had a security flaw in versions up to 7.5.3. This flaw allowed people with administrator privileges to include and execute any file they wished on the server. That file could contain any code, which could be used to get around security restrictions, access sensitive data, or even execute code where images or other “safe” file types can be uploaded and included.

Detected in:

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

Is this information incorrect? Please leave us a message.