CVE Intelligence

wpWax Directorist vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting wpWax Directorist: 4 record(s), with affected versions and fixes.

CVE-2026-59518 Critical · 9.8 CWE-502 Jul 13, 2026
WordPress Directorist plugin <= 8.8.2 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in wpWax Directorist directorist allows Object Injection.This issue affects Directorist: from n/a through <= 8.8.2.
CVE-2026-39509 Medium · 5.3 CWE-862 Apr 8, 2026
WordPress Directorist plugin <= 8.5.10 - Broken Access Control vulnerability
Missing Authorization vulnerability in wpWax Directorist directorist allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Directorist: from n/a through <= 8.5.10.
CVE-2025-68069 High · 7.1 CWE-862 Feb 20, 2026
WordPress Directorist plugin <= 8.6.6 - Broken Access Control vulnerability
Missing Authorization vulnerability in wpWax Directorist directorist allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Directorist: from n/a through <= 8.6.6.
CVE-2025-64250 Medium · 4.7 CWE-601 Dec 16, 2025
WordPress Directorist plugin <= 8.6.6 - Open Redirection vulnerability
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in wpWax Directorist directorist allows Phishing.This issue affects Directorist: from n/a through <= 8.6.6.