CVE-2023-2252
Directorist < 7.5.4 - Admin+ LFI
LOW 2.7EPSS 1.3%
The Directorist WordPress plugin before 7.5.4 is vulnerable to Local File Inclusion as it does not validate the file parameter when importing CSV files.
- Affected
- Directorist
- CVSS v3.1 NVD
- 2.7 LOW
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N - EPSS
- 1.34% chance of exploitation in the next 30 days, 71st percentile
- Nuclei
- low · CWE-22
- Published
- 2024-01-16
- Updated
- 2025-06-02