Known vulnerabilities in the Directorist plugin
15 security advisories have been published for the Directorist plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.
- Directorist - Security Vulnerability (CVE-2026-84066) LOW
- Directorist - Cross-Site Scripting (XSS) (CVE-2026-77757) MEDIUM
- Directorist - Remote Code Execution (CVE-2025-10488) HIGH
- Directorist - Broken Access Control (CVE-2025-2224) MEDIUM
- Directorist - Privilege Escalation (CVE-2025-1570) HIGH
- Directorist - Information Disclosure (CVE-2024-12041) MEDIUM
- Directorist - Broken Access Control (CVE-2024-1322) MEDIUM
- Directorist - Path Traversal (CVE-2023-2252) LOW
- Directorist - Security Vulnerability (CVE-2023-41798) HIGH
- Directorist - Security Vulnerability (CVE-2023-1888) HIGH
- Directorist - Improper Input Validation (CVE-2023-1889) MEDIUM
- Directorist - Security Vulnerability (CVE-2022-2376) MEDIUM
- Directorist - Cross-Site Request Forgery (CSRF) (CVE-2022-2377) MEDIUM
- Directorist - Security Vulnerability (CVE-2022-2046) MEDIUM
- Directorist - Arbitrary File Upload (CVE-2021-24981) HIGH