Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: aDirectory Clear all filters
TI-2025-41584 CVE-2025-67975 · GHSA-cf7g-cxh2-5vhr

WordPress aDirectory plugin <= 3.0.3 - Broken Access Control vulnerability

Priority LOW 29

Missing Authorization vulnerability in aDirectory aDirectory adirectory allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects aDirectory: from n/a through <= 3.0.3.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00368 Published 2026-02-20 No fix listed CWE-862
TI-2024-12582 CVE-2024-13541 · GHSA-87pr-rmr3-3wr6

Missing authorization in aDirectory – WP Business Directory Plugin and Classified Ads…

Priority LOW 24

The aDirectory – WordPress Directory Listing Plugin plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the adqs_delete_listing() function in all versions up to, and inclu…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00328 Published 2025-02-12 No fix listed CWE-862
TI-2024-33853 CVE-2024-50420 · GHSA-pcj5-9mq2-f584

WordPress aDirectory plugin <= 1.3 - Arbitrary File Upload vulnerability

Priority MEDIUM 49

Unrestricted Upload of File with Dangerous Type vulnerability in aDirectory aDirectory adirectory allows Upload a Web Shell to a Web Server.This issue affects aDirectory: from n/a through <= 1.3.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00511 Published 2024-10-29 No fix listed CWE-434