CyberRota Analysis
AI-GeneratedThe Directorist plugin for WordPress prior to version 8.9.3 is vulnerable due to inadequate sanitization of user-supplied image references, enabling subscribers to move arbitrary image files to publicly accessible directories and delete them from their original locations. This could lead to unauthorized access to sensitive files and potential data exposure. WordPress site administrators using this plugin should prioritize updating to the latest version to mitigate these risks.
Original NVD Description
The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.9.3 does not sanitize a user-supplied image reference before using it as the source of a file move, allowing users with a subscriber-level account to relocate arbitrary server-readable image files into a publicly accessible directory, and to delete them from their original location.