CVE-2023-2252

LOW NUCLEI

Wpwax Directorist < 7.5.4 - Path Traversal

Title source: rule

Description

The Directorist WordPress plugin before 7.5.4 is vulnerable to Local File Inclusion as it does not validate the file parameter when importing CSV files.

Nuclei Templates (1)

Directorist < 7.5.4 - Local File Inclusion
LOWVERIFIEDby r3Y3r53

References (1)

Scores

CVSS v3 2.7
EPSS 0.0780
EPSS Percentile 92.0%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

Details

CWE
CWE-22
Status published
Products (1)
wpwax/directorist < 7.5.4
Published Jan 16, 2024
Tracked Since Feb 18, 2026