Skip to content
5.3 Medium

CVE-2024-12041 The Directorist: AI-Powered WordPress Business Directory Plugin with Classified Ads Listings plugin for WordPress is…

Description

The Directorist: AI-Powered WordPress Business Directory Plugin with Classified Ads Listings plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 8.0.12 via the /wp-json/directorist/v1/users/ endpoint. This makes it possible for unauthenticated attackers to extract sensitive data including including usernames, email addresses, names, and more information about users.

Affected products and versions

Product Affected versions Fixed in
Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings 8.0 earliest → 8.0.12 No fix stated
Directorist: AI-Powered Business Directory, Listings & Classified Ads 8.0 earliest → 8.0.12 No fix stated
The 5 CVEs of Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings →
Track this CVE