CVE-2026-66661

24th percentile - higher than 24% of all known CVEs

The Directories Pro plugin version 2.0.5 and earlier contains a subscriber privilege escalation vulnerability. A user with low privileges can elevate their privileges to a higher level.

The risk includes unauthorized access to administrative functions, content modification, or taking control of the website. This could lead to compromise of data integrity and confidentiality.

It is recommended to update the Directories Pro plugin to a version newer than 2.0.5. Also, review user permissions and restrict access to sensitive functions.