https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-1570.htmlhttps://patchthecve.com/cve/CVE-2025-1570.htmlWed, 17 Jun 2026 08:39:23 +0000HIGH 8.1: The Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 8.1. This is due to the directorist_generate_password_reset_pin_code() and reset_user_password() fuhttps://patchthecve.com/cve/CVE-2024-12041.htmlhttps://patchthecve.com/cve/CVE-2024-12041.htmlWed, 17 Jun 2026 06:58:56 +0000MEDIUM 5.3: The Directorist: AI-Powered WordPress Business Directory Plugin with Classified Ads Listings plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 8.0.12 via the /wp-json/directorist/v1/users/ endpoint. This makes it possible for unauthenticated attackers thttps://patchthecve.com/cve/CVE-2024-1322.htmlhttps://patchthecve.com/cve/CVE-2024-1322.htmlWed, 17 Jun 2026 07:03:58 +0000MEDIUM 5.3: The Directorist – WordPress Business Directory Plugin with Classified Ads Listings plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'setup_wizard' function in all versions up to, and including, 7.8.4. This makes it possible for unauthen