CVE-2022-3961

6.5 mediumEPSS 0.7%

Medium (6.5) in wpwax directorist. EPSS 0.7% chance of exploitation in the next 30 days.

The Directorist WordPress plugin before 7.4.4 does not prevent users with low privileges (like subscribers) from accessing sensitive system information.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 54% of CVEs (scores of 2026-10-31)
CWE: CWE-862
Published: 2022-12-19
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

wpwax:directorist

References

https://wpscan.com/vulnerability/6aad6454-de1b-4304-9c14-05e28d08b253
https://wpscan.com/vulnerability/6aad6454-de1b-4304-9c14-05e28d08b253

Check your stack JSON