What is CVE-2025-1570?

CVE-2025-1570 is a high-severity vulnerability in Wpwax Directorist, classified under Weak Password Recovery Mechanism for Forgotten Password. CVSS score: 8.1/10. Published 2025-02-28.

How severe is CVE-2025-1570?

High severity. CVSS v3 base score is 8.1 out of 10.

Is CVE-2025-1570 known to be exploited?

2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Wpwax Directorist

CVE-2025-1570

The Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 8.1. This is due to the directorist_generate_password_reset_pin_code() and reset_user_password() functions not having enough controls to prevent a successful brute force attack of the OTP to change a password, or verify that a password reset request came from an authorized user. This makes it possible for unauthenticated attackers to generate and brute force an OTP that makes it possible to change any users passwords, including an administrator.

EPSS: 0.004 (35.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.1 (High). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Weakness classification (CWE)

CWE-640 — Weak Password Recovery Mechanism for Forgotten Password

Public proof-of-concept exploits

References

security@wordfence.com (Third Party Advisory)
security@wordfence.com (Product)

Frequently asked questions

What is CVE-2025-1570?: CVE-2025-1570 is a high-severity vulnerability in Wpwax Directorist, classified under Weak Password Recovery Mechanism for Forgotten Password. CVSS score: 8.1/10. Published 2025-02-28.
How severe is CVE-2025-1570?: High severity. CVSS v3 base score is 8.1 out of 10.
Is CVE-2025-1570 known to be exploited?: 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.