Information Exposure in Directorist: AI-Powered WordPress Business Directory Plugin

CVE-2024-12041

What is CVE-2024-12041?

The Directorist: AI-Powered WordPress Business Directory Plugin is susceptible to information exposure due to inadequate access controls in the /wp-json/directorist/v1/users/ endpoint. This vulnerability allows unauthenticated attackers to exploit the API, gaining unauthorised access to sensitive user data, which may include usernames, email addresses, and personal details. Affected installations are urged to update to the latest version to mitigate this significant security risk.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References