Skip to content
Sign in
2.7 Low

CVE-2023-2252 The Directorist WordPress plugin before 7.5.4 is vulnerable to Local File Inclusion as it does not validate the file…

Description

The Directorist WordPress plugin before 7.5.4 is vulnerable to Local File Inclusion as it does not validate the file parameter when importing CSV files.

Affected products and versions

Product Affected versions Fixed in
Directorist 7.5 earliest → < 7.5.4 7.5.4

Other CVEs of Directorist

The 3 CVEs of Directorist →
CVE-2022-3961 The Directorist WordPress plugin before 7.4.4 does not prevent users with low privileges (like subscribers) from… 6.5 Medium CVE-2022-3930 The Directorist WordPress plugin before 7.4.2.2 suffers from an IDOR vulnerability which an attacker can exploit to… 6.5 Medium
Track this CVE