PT-2025-51398 · Wpwax · Directorist

Published 2025-12-16 · Updated 2025-12-17 · CVE-2025-64250

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Directorist versions through 8.5.6

Description An open redirect issue exists in wpWax Directorist, potentially enabling phishing attacks. The vulnerability allows redirection to untrusted sites.

Recommendations Update Directorist to a version newer than 8.5.6.

Fix

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

CVE-2025-64250

Affected Products

Directorist

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-64250 · Security Note
• https://vdp.patchstack.com/database/Wordpress/Plugin/directorist/vulnerability/wordpress-directorist-plugin-8-5-6-open-redirection-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/2001365799752106043 · Twitter Post
• https://patchstack.com/database/Wordpress/Plugin/directorist/vulnerability/wordpress-directorist-plugin-8-5-6-open-redirection-vulnerability?_s_id=cve · Note