CVE Database /
CVE-2025-12174
CVE · Medium
CVE-2025-12174 — Directorist: AI-Powered Business Directory, Listings & Classified Ads [directorist] < 8.5.3
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2025-12174
|
Directorist: AI-Powered Business Directory, Listings & Classified Ads [directorist] < 8.5.3 |
Missing Authorization |
Medium
6.5
|
< 8.5.3
|
8.5.3 |
2025-11-18 |
—
|
CVE-2025-12174
The Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the 'directorist_prepare_listings_export_file' and 'directorist_type_slug_change' AJAX actions in all versions up to, and including, 8.5.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to export listing details and change the directorist slug.
Source:
CVE.org
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings