N/A
2026-02-09< 1.32.1
Name Directory <= 1.32.0 - Unauthenticated Stored Cross-Site Scripting via Double HTML-Entity Encoding in Submission Form
Name Directory
Minimum safe version
1.33.0
Update to 1.33.0 or later to address 15 fixable vulnerabilities
Latest available1.33.1 ✓
N/A
2026-03-10< 1.33.0
Name Directory <= 1.32.1 - Unauthenticated Stored Cross-Site Scripting via 'name_directory_name'
High 7.2
2026-01-14< 1.31.0
CVE-2025-15283
Medium 4.3
2025-05-19< 1.30.1
CVE-2025-39454
High 7.1
2024-09-17< 1.29.1
CVE-2024-43938
N/A
< 1.18
Name Directory < 1.18 - Cross-Site Request Forgery (CSRF)
N/A
< 1.25.4
Name Directory < 1.25.4 - Arbitrary Directory/Name Deletion via CSRF
N/A
< 1.25.5
Name Directory < 1.25.5 - Stored Cross-Site Scripting via CSRF
Medium 4.3
2023-05-22< 1.27.2
CVE-2023-22692
N/A
2022-07-15< 1.25.5
Name Directory <= 1.25.4 - Unauthorized Settings Update
N/A
2022-07-18< 1.25.5
WordPress Name Directory plugin <= 1.25.4 - Stored Cross-Site Scripting (XSS) via Cross-Site Request Forgery (CSRF) vulnerability
Medium 6.1
2022-07-25< 1.25.4
CVE-2022-2072
Medium 6.1
2022-07-25< 1.25.4
CVE-2022-2071
N/A
2022-06-28< 1.25.4
WordPress Name Directory plugin <= 1.25.3 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities
High 8.8
2025-10-03< 1.18
CVE-2021-20652