📦 Directorypress

This vulnerability allows attackers to inject malicious scripts into DirectoryPress WordPress plugin pages, which execute in victims' browsers when they visit manipulated URLs. It affects all Director...

This SQL injection vulnerability in the DirectoryPress WordPress plugin allows attackers to execute arbitrary SQL commands on the database. It affects all DirectoryPress installations running versions...

The DirectoryPress WordPress plugin is vulnerable to stored XSS via SVG file uploads due to insufficient input sanitization. Authenticated attackers with author-level access can inject malicious scrip...