The Directorist plugin for WordPress has a security issue in versions up to and including 7.4.2.1. This issue allows people with limited access to the system to bypass security measures and gain access to parts of the system they should not be able to. This could allow them to change user passwords and potentially take control of administrator accounts.