CVE-2026-77757
Received Received - Intake

Directory Traversal in Directorist WordPress Plugin

Publication date: 2026-08-26

Last updated on: 2026-08-26

Assigner: WPScan

Description
The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.9.3 does not sanitize a user-supplied image reference before using it as the source of a file move, allowing users with a subscriber-level account to relocate arbitrary server-readable image files into a publicly accessible directory, and to delete them from their original location.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-26
Last Modified
2026-08-26
Generated
2026-08-26
AI Q&A
2026-08-26
EPSS Evaluated
N/A
NVD
CVE-2026-77757
EUVD
EUVD-2026-66287

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
directorist directorist to 8.9.3 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-22 The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability affects the Directorist WordPress plugin versions 8.5 to 8.9.2. It allows users with a subscriber-level account to move arbitrary server-readable image files into a publicly accessible directory and delete them from their original location. The issue occurs due to improper sanitization of user-supplied image references in the REST v2 Listing Submission feature.

Detection Guidance

Check the installed version of the Directorist plugin. If it is between 8.5 and 8.9.2, the system is vulnerable. Use WordPress admin panel or run a command like 'wp plugin list' if using WP-CLI to verify the version.

Impact Analysis

An attacker with subscriber access could manipulate files on the server, potentially exposing sensitive data by moving files to public directories or deleting critical files. This could lead to unauthorized access, data leaks, or service disruption.

Compliance Impact

This vulnerability could lead to non-compliance with GDPR or HIPAA by enabling unauthorized access to or deletion of sensitive data. Exposure of files in public directories may violate data protection requirements for confidentiality and integrity.

Mitigation Strategies

Update the Directorist plugin to version 8.9.3 or later immediately. If updating is not possible, restrict subscriber-level accounts from accessing the REST v2 Listing Submission feature as a temporary measure.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-77757. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart