CVE-2022-3961: Wpwax Directorist

Medium severity, CVSS 6.5. EPSS: 0.7% chance of exploitation in the next 30 days.

The Directorist WordPress plugin before 7.4.4 does not prevent users with low privileges (like subscribers) from accessing sensitive system information.

Affected products

• Wpwax Directorist: before 7.4.4 (fixed in 7.4.4)

Published 2022-12-19. Last modified 2026-06-17.