CVE-2023-2252
Directorist < 7.5.4 - Admin+ LFI
Vexday Risk Score
23Low
SSVC decision (CISA)
Attend
PoC available → attend closely
CVSS 2.7EPSS 1.3%KEV nãoPoC —Nuclei simMetasploit —Patch —
Lifecycle
16 Jan 2024Published on NVD
Recommendation: Plan a near-term fix — a public PoC already exists.
The Directorist WordPress plugin before 7.5.4 is vulnerable to Local File Inclusion as it does not validate the file parameter when importing CSV files.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
Affected products
Unknown · DirectoristWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →