CVE-2023-2252

The Directorist WordPress plugin before 7.5.4 is vulnerable to Local File Inclusion as it does not validate the file parameter when importing CSV files.

CVSS v3.1

2.7 LOWCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

CVSS v3.1

2.7 LOWCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

EPSS

1.34% chance of exploitation in the next 30 days, 69th percentile

Nuclei

low · CWE-22

Published

2024-01-16

Updated

2025-06-02

Proof-of-concept exploits (1)

• https://wpscan.com/vulnerability/9da6eede-10d0-4609-8b97-4a5d38fa8e69/

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-2252.yaml

References

• CVE Record
• NVD entry

Related

• CVE-2023-22518
• CVE-2023-22524
• CVE-2023-22515
• CVE-2023-22527
• CVE-2023-2251
• CVE-2023-2254