The Directorist plugin for WordPress is a program that has a security issue in versions up to 7.5.4. Because of a mistake in one of the parts of the program, it is possible for someone with lower-level access to the program to be able to change someone else’s password. This could give them a higher level of access, such as an administrator role.