low2.7
CVE-2023-2252
The Directorist WordPress plugin before 7.5.4 is vulnerable to Local File Inclusion as it does not validate the file parameter when importing CSV files.
Impact
The Directorist WordPress plugin before 7.5.4 is vulnerable to Local File Inclusion as it does not validate the file parameter when importing CSV files.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wpwax | Directorist | before 7.5.4 |