High severity7.5NVD Advisory· Published Dec 21, 2021· Updated Jun 17, 2026

CVE-2021-24981

Description

The Directorist WordPress plugin before 7.0.6.2 was vulnerable to Cross-Site Request Forgery to Remote File Upload leading to arbitrary PHP shell uploads in the wp-content/plugins directory.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Wpwax/Directorist
cpe:2.3:a:wpwax:directorist:*:*:*:*:*:wordpress:*:*
Range: <7.0.6.2
WordPress/Directoristdescription
WordPress/Directoristllm-fuzzy
Range: <7.0.6.2
Package: https://wordpress.org/plugins/directorist

Patches

Vulnerability mechanics

References

blog.sucuri.net/2021/11/fake-ransomware-infection-spooks-website-owners.htmlnvdExploitThird Party Advisory
wpscan.com/vulnerability/4c45df6d-b3f6-49e5-8b1f-edd32a12d71cnvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000