Log in Start free

Designinvento

Products

ProductCVEsExploitedLatest
DirectoryPress10–Oct 10, 2026
DirectoryPress – Business Directory And Classified Ad Listing2–Apr 16, 2026
DirectoryPress Frontend1–Feb 15, 2025

Exploited and recent CVEs

  • CVE-2026-62032 Critical 9.8 WordPress DirectoryPress plugin <= 3.6.27 - Local File Inclusion vulnerability 0.3%
  • CVE-2026-3489 High 7.5 DirectoryPress – Business Directory And Classified Ad Listing <= 3.6.26 - Unauthenticated SQL Injection via 'packages' 0.4%
  • CVE-2026-39566 Medium 4.3 WordPress DirectoryPress plugin <= 3.6.26 - Sensitive Data Exposure vulnerability 0.2%
  • CVE-2026-27387 Medium 5.4 WordPress DirectoryPress plugin <= 3.6.26 - Broken Access Control vulnerability 0.3%
  • CVE-2026-23548 Medium 5.3 WordPress DirectoryPress plugin <= 3.6.25 - Broken Access Control vulnerability 0.3%
  • CVE-2025-62967 Medium 6.5 WordPress DirectoryPress plugin <= 3.6.25 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-32249 Medium 5.4 WordPress DirectoryPress Plugin <= 3.6.22 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
  • CVE-2024-10581 Medium 4.3 DirectoryPress Frontend <= 2.7.9 - Cross-Site Request Forgery to Listing Status Update 0.2%
  • CVE-2024-49633 High 7.1 WordPress DirectoryPress plugin <= 3.6.19 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-10584 Medium 5.4 DirectoryPress <= 3.6.16 - Authenticated (Author+) Stored Cross-Site Scripting 0.3%
  • CVE-2023-37967 Medium 6.5 WordPress DirectoryPress plugin <= 3.6.2 - Unauthenticated Broken Access Control Vulnerability 0.7%
  • CVE-2024-38755 High 8.5 WordPress DirectoryPress plugin <= 3.6.10 - SQL Injection vulnerability 0.7%
  • CVE-2024-32567 High 7.1 WordPress DirectoryPress plugin <= 3.6.7 - Reflected Cross Site Scripting (XSS) vulnerability 0.4%