Critical 9.8
2025-06-27< 3.3.7
CVE-2024-12827
Minimum safe version
3.3.7
Update to 3.3.7 or later to address 3 fixable vulnerabilities
CVE-2024-12827
DWT - Directory & Listing WordPress Theme <=3.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
WordPress DWT - Directory & Listing Theme <= 3.3.3 is vulnerable to Cross Site Scripting (XSS)