Designinvento

12 CVEs across 3 Designinvento products. Browse Designinvento vulnerabilities, severities, and proof-of-concept exploits.

Designinvento products with known CVEs

ProductCVEs
Directorypress11
Directorypress – Business Directory And Classified Ad Listing2
Directorypress Frontend1
Designinvento CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-3489High7.52026-04-16The DirectoryPress – Business Directory And Classified Ad Listing plugin for WordPress is vulnerable to SQL Injection via the 'packages' parameter in versions…
CVE-2026-39566Medium4.32026-04-08Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Designinvento DirectoryPress directorypress allows Retrieve Embedde…
CVE-2026-27387Medium5.42026-02-19Missing Authorization vulnerability in Designinvento DirectoryPress directorypress allows Exploiting Incorrectly Configured Access Control Security Levels.This…
CVE-2026-23548Medium5.32026-02-19Missing Authorization vulnerability in Designinvento DirectoryPress directorypress allows Exploiting Incorrectly Configured Access Control Security Levels.This…
CVE-2025-62967Medium6.52025-10-27Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Designinvento DirectoryPress directorypress allows DOM-Ba…
CVE-2025-32249Medium5.42025-04-04Cross-Site Request Forgery (CSRF) vulnerability in Designinvento DirectoryPress directorypress allows Cross Site Request Forgery.This issue affects DirectoryPr…
CVE-2024-10581Medium4.32025-02-15The DirectoryPress Frontend plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.7.9. This is due to missin…
CVE-2024-49633High7.12025-01-07Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Designinvento DirectoryPress directorypress allows Reflec…
CVE-2024-10584Medium5.42024-12-24The DirectoryPress – Business Directory And Classified Ad Listing plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all…
CVE-2023-37967Medium6.52024-12-13Missing Authorization vulnerability in Designinvento DirectoryPress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects…
CVE-2024-38755High8.52024-07-22Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Designinvento DirectoryPress allows SQL Injection.This is…
CVE-2024-32567High7.12024-04-18Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Designinvento DirectoryPress allows Reflected XSS.This is…