Input validation vulnerability in DirectoryPress – Business Directory And Classified Ad Listing 3.6.19

The DirectoryPress plugin for WordPress, which helps create business directories and classified ad listings, has a security issue. This issue, known as Cross-Site Request Forgery, affects all versions up to 3.6.19. The problem is caused by a function that doesn’t properly check for a security code, making it possible for attackers to change settings and insert harmful code into a website. This can happen if they are able to trick a site administrator into clicking on a fake link.