PatchTheCVEweb directory free vulnerabilities and fixes
Recent CVEs affecting web directory free, with upgrade or downgrade steps. 4 tracked.
Also searched as: webdirectoryfree.
web directory free has 4 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 4. Most recent: 2024-08-30. Highest priority: CVE-2024-3552 (score 72/100).
- CVE-2024-3673 CRITICAL 9.1 UPGRADE The Web Directory Free WordPress plugin before 1.7.3 does not validate a parameter before using it in an inclu
- CVE-2024-3669 MEDIUM 6.8 UPGRADE The Web Directory Free WordPress plugin before 1.7.2 does not sanitise and escape a parameter before outputtin
- CVE-2024-3552 CRITICAL 9.8 UPGRADE The Web Directory Free WordPress plugin before 1.7.0 does not sanitise and escape a parameter before using it
- CVE-2023-2201 HIGH 8.8 UPGRADE The Web Directory Free for WordPress is vulnerable to SQL Injection via the ‘post_id’ parameter in versions up
FAQ
How do I fix web directory free vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is web directory free being exploited right now?
None of the tracked web directory free CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which web directory free CVE should I patch first?
CVE-2024-3552 currently ranks highest (72/100): The Web Directory Free WordPress plugin before 1.7.0 does not sanitise and escape a parameter before using it .