Directorist: AI-Powered Business Directory, Listings & Classified Ads vulnerabilities
Plugin slug directorist · 41 known vulnerabilities · latest disclosed 2026-11-07 · WordPress.org page
Every listed vulnerability has a fix. Version 8.11 or later is not affected by any of them. If your site runs an older version, update it.
10 of 41 rated high or critical (CVSS 7 or more).
Known vulnerabilities in Directorist: AI-Powered Business Directory, Listings & Classified Ads
| Severity | Affected versions | Fixed in | CVE | Published | Details |
|---|---|---|---|---|---|
| Medium 6.4 | <= 8.10.7 | 8.11 | CVE-2026-122661 | 2026-11-07 | Advisory |
| Medium 6.4 | <= 8.10.6 | 8.10.7 | CVE-2026-119497 | 2026-11-07 | Advisory |
| Medium 4.3 | <= 8.10 | 8.11 | CVE-2026-118534 | 2026-11-05 | Advisory |
| Medium 4.3 | <= 8.10 | 8.11 | CVE-2026-118529 | 2026-11-05 | Advisory |
| Medium 4.3 | <= 8.10 | 8.11 | CVE-2026-118533 | 2026-11-05 | Advisory |
| Low 2.7 | <= 8.10 | 8.11 | CVE-2026-118530 | 2026-11-05 | Advisory |
| Medium 4.3 | <= 8.10 | 8.11 | CVE-2026-118532 | 2026-11-05 | Advisory |
| Medium 4.3 | <= 8.10 | 8.11 | CVE-2026-118528 | 2026-11-05 | Advisory |
| Medium 6.4 | <= 8.10.2.1 | 8.10.3 | CVE-2026-100185 | 2026-10-13 | Advisory |
| High 8.1 | <= 8.10.2.1 | 8.10.3 | CVE-2026-17092 | 2026-10-13 | Advisory |
| Medium 4.3 | <= 8.9.4 | 8.9.5 | CVE-2026-84150 | 2026-09-21 | Advisory |
| Medium 4.3 | 3.1.0 to 8.9.4 | 8.9.5 | CVE-2026-84098 | 2026-09-21 | Advisory |
| Medium 5.3 | 8.1 to 8.9.4 | 8.9.5 | CVE-2026-84026 | 2026-09-21 | Advisory |
| Medium 4.3 | 8.9.1 to 8.9.4 | 8.9.5 | CVE-2026-84027 | 2026-09-21 | Advisory |
| Medium 6.4 | <= 8.9.4 | 8.9.5 | CVE-2026-84046 | 2026-09-21 | Advisory |
| Medium 4.3 | 8.5 to 8.9.4 | 8.9.5 | CVE-2026-77766 | 2026-09-21 | Advisory |
| Medium 4.3 | < 8.9 | 8.9 | CVE-2026-84066 | 2026-09-04 | Advisory |
| Medium 4.3 | 8.5 to 8.9.2 | 8.9.3 | CVE-2026-77757 | 2026-08-28 | Advisory |
| High 7.5 | <= 8.8.2 | 8.8.3 | CVE-2026-59518 | 2026-07-09 | Advisory |
| Medium 5.3 | <= 8.5.10 | 8.6.1 | CVE-2026-39509 | 2026-02-22 | Advisory |
| Medium 4.3 | <= 8.6.6 | 8.6.7 | CVE-2025-68069 | 2026-01-27 | Advisory |
| Medium 5.8 | <= 8.6.6 | 8.6.7 | CVE-2025-64250 | 2025-12-15 | Advisory |
| Medium 6.5 | <= 8.5.2 | 8.5.3 | CVE-2025-12174 | 2025-11-18 | Advisory |
| High 8.1 | <= 8.4.8 | 8.4.9 | CVE-2025-10488 | 2025-10-24 | Advisory |
| Medium 5.3 | <= 8.2 | 8.3 | CVE-2025-2224 | 2025-03-24 | Advisory |
| High 8.1 | <= 8.1 | 8.2 | CVE-2025-1570 | 2025-02-27 | Advisory |
| Medium 5.3 | <= 8.0.12 | 8.1 | CVE-2024-12041 | 2025-01-31 | Advisory |
| Medium 5.3 | <= 7.8.6 | 7.9.0 | CVE-2024-33929 | 2024-04-29 | Advisory |
| Medium 5.3 | <= 7.8.4 | 7.8.5 | CVE-2024-1322 | 2024-02-12 | Advisory |
| Low 3.8 | <= 7.7.1 | 7.7.2 | CVE-2023-41798 | 2023-09-05 | Advisory |
| High 8.8 | <= 7.5.4 | 7.5.5 | CVE-2023-1888 | 2023-06-01 | Advisory |
| Medium 6.5 | <= 7.5.4 | 7.5.5 | CVE-2023-1889 | 2023-06-01 | Advisory |
| High 7.2 | <= 7.5.3 | 7.5.4 | CVE-2023-2252 | 2023-05-10 | Advisory |
| Medium 4.3 | <= 7.7.1 | 7.7.2 | none | 2022-12-16 | Advisory |
| Medium 4.3 | <= 7.7.1 | 7.7.2 | CVE-2022-47150 | 2022-12-14 | Advisory |
| Medium 4.3 | <= 7.4.3 | 7.4.4 | CVE-2022-3961 | 2022-11-28 | Advisory |
| High 8.8 | <= 7.4.2.1 | 7.4.2.2 | CVE-2022-3930 | 2022-11-21 | Advisory |
| High 7.5 | <= 7.3.0 | 7.3.1 | CVE-2022-2376 | 2022-08-10 | Advisory |
| Medium 6.3 | <= 7.2.3 | 7.3.0 | CVE-2022-2377 | 2022-07-26 | Advisory |
| High 7.2 | <= 7.2.2 | 7.2.3 | CVE-2022-2046 | 2022-07-18 | Advisory |
| High 8.8 | <= 7.0.6.1 | 7.0.6.2 | CVE-2021-24981 | 2021-11-16 | Advisory |
Check if a site is affected
Enter a site address to see which version of Directorist: AI-Powered Business Directory, Listings & Classified Ads and other plugins it runs, and whether they match a known vulnerability.
Questions
Is the Directorist: AI-Powered Business Directory, Listings & Classified Ads plugin safe to use?
All 41 known issues are fixed in current versions (8.11 or later). Keeping it updated is what matters.
How do I check which version of Directorist: AI-Powered Business Directory, Listings & Classified Ads my site runs?
In WordPress go to Plugins > Installed Plugins. From the outside, the free PluginPeek scan below reads the version from the site's public files.
How do I fix a vulnerable plugin?
Make a full backup, then update it from Dashboard > Updates and check the site afterwards. If you would rather not, we can do it for a fixed $99, paid after you have checked the site.