CVE

CVE-2023-2252

2.7

CVSSlow

Exploitable remotely over the internet · requires high privileges.

Description

The Directorist WordPress plugin before 7.5.4 is vulnerable to Local File Inclusion as it does not validate the file parameter when importing CSV files.

Attack Vector

Network

Privileges Req.

High

User Interaction

None

directorist

Updated Sep 26, 2026View on NVD →

S4E scanner

lowProduct Based Web Vulnerabilities~10 seconds

CVE-2023-2252 Scanner

CVE-2023-2252 scanner - Local File Inclusion (LFI) vulnerability in Directorist plugin for WordPress

Used 3.2k times · 5.9k assets checked · domain, ipv4, subdomain

Scanner page →Run scanner

CVE history: directorist

Predict next CVE date with AI

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →