Skip to main content

Software intelligence

Directorist vulnerabilities

23 tracked advisories · slug directorist

Important: Directorist appearing in this catalog does not mean your website is affected. Exposure depends on your installed version. How SiteRespond intelligence works

Tracked advisories

23

Latest advisory

9 July 2026

CISA KEV matches

0

In this WordPress feed

WordPress slug

directorist

Plugin

What this means for Directorist

This catalog lists 23 known advisories affecting Directorist. The most recent was published on 9 July 2026. If you use this software, compare your installed version against the affected ranges on each advisory and update to a fixed release outside those ranges. SiteRespond Defence checks your actual installed version when the plugin is connected — listing here does not by itself mean your site is vulnerable.

Latest issues

  • Directorist: AI-Powered Business Directory, Listings & Classified Ads <= 8.8.2 - Authenticated (Subscriber+) PHP Object Injection

    This advisory describes a other issue in the affected software. Review the source advisory and your installed version to assess exposure.

    Published 9 July 2026

  • Directorist <= 8.5.10 - Missing Authorization

    This advisory describes a other issue in the affected software. Review the source advisory and your installed version to assess exposure.

    Published 22 February 2026

  • Directorist <= 8.6.6 - Missing Authorization

    This advisory describes a other issue in the affected software. Review the source advisory and your installed version to assess exposure.

    Published 27 January 2026

Vulnerability types

  • Remote code execution2
  • Authentication bypass1
  • Privilege escalation1
  • CSRF1

Authentication (inferred from titles)

  • Unauthenticated4
  • Authenticated9
  • Unspecified10

Advisory history

Known Directorist advisories published by month.

All advisories

916 of 23

2 / 2

Check whether your installed version is affected

SiteRespond Defence matches your installed Directorist version against this catalog when the Defence plugin is connected to your WordPress site.