PT-2025-43716 · WordPress · Directorist

Arkadiusz Hydzik · Published 2025-10-25 · Updated 2025-10-30 · CVE-2025-10488

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions Directorist versions up to and including 8.4.8

Description The Directorist plugin for WordPress is susceptible to arbitrary file move due to inadequate file path validation within the add listing action AJAX action. This allows unauthenticated attackers to move arbitrary files on the server. Successful exploitation, such as moving files like wp-config.php, can lead to remote code execution.

Recommendations Update to version 8.4.9 or later.

Fix

RCE

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2025-10488

Affected Products

Directorist

References · 14

• https://nvd.nist.gov/vuln/detail/CVE-2025-10488 · Security Note
• https://twitter.com/MNovofastovsky/status/1983542085358858672 · Twitter Post
• https://plugins.trac.wordpress.org/browser/directorist/tags/8.4.5/includes/classes/class-add-listing.php#L634 · Note
• https://wordfence.com/threat-intel/vulnerabilities/id/2249ef72-9955-4636-b32f-e88720923268?source=cve · Note
• https://t.me/cveNotify/140341 · Telegram Post
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3377181%40directorist&new=3377181%40directorist&sfp_email=&sfph_mail= · Note
• https://twitter.com/VulmonFeeds/status/1982042557405106277 · Twitter Post
• https://twitter.com/CveTodo/status/1983083587550273961 · Twitter Post
• https://twitter.com/ZeroPathLabs/status/1981990486760955969 · Twitter Post
• https://twitter.com/VolerionSec/status/1981986649237070159 · Twitter Post
• https://twitter.com/CVEnew/status/1981982756889407572 · Twitter Post
• https://t.me/CVEtracker/35738 · Telegram Post
• https://twitter.com/RedPacketSec/status/1982020445672030662 · Twitter Post
• https://twitter.com/cracbot/status/1983851417216675863 · Twitter Post