Employee Directory – Staff & Team Directory
Employee Directory – Staff & Team Directory has 3 disclosed vulnerabilities in the WordSec catalog, all reported in 2025; all 3 are fixed as of September 2026. Their average CVSS score is 7.0, and the most serious one scores 8.1 out of 10. Severity breakdown: 0 critical and 1 high. 2025 was the busiest year with 3 disclosures.
The most common weakness is Cross-Site Scripting, behind 2 of the records (67%). Other recurring categories include Deserialization Of Untrusted Data.
Every one of the 3 issues recorded for Employee Directory – Staff & Team Directory has a vendor fix available, so running the current release closes all known holes.
2 independent researchers contributed these findings, most of them (2) reported by Muhammad Yudha - DJ. Employee Directory – Staff & Team Directory is installed on roughly 100 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.
CVE-2025-53243Employee Directory – Staff Listing & Team Directory Plugin for WordPress <= 4.5.5 - Unauthenticated PHP Object Injection
Read the full analysisVulnerability Records
Employee Directory – Staff & Team Directory
Author
emarket-design
Employee Directory is a searchable staff and team directory plugin for WordPress. Display employees with photos, job titles, departments, and bios in a clean, filterable layout that visitors can browse or search by name, title, or department. Built to scale from small teams to large organizations, Employee Directory supports enterprise use cases like company intranets, org charts, and centralized identity sync with Microsoft Entra ID, Active Directory, and LDAP, available through official add-ons and the Professional version. Custom fields, advanced layouts, and reporting hierarchies are also available with Professional. Employee Directory supports a modular architecture designed for growing organizations. Start with a simple directory and extend it as your needs evolve. Advanced Features & Integrations Employee Directory supports advanced organizational and intranet use cases through official add-ons and the Professional version. Available capabilities include: Organizational hierarchies and org charts LDAP / Active Directory integration Microsoft Entra ID (Azure AD) integration Bidirectional JSON sync with any external system via EMD Integrator, including syncing two Employee Directory sites with each other Bulk employee data synchronization Workflow automation (optional, customizable feature) See Employee Directory in action → Explore Employee Directory LIVE DEMO SITE Employee Directory Starter Demo Site Employee Directory Professional Demo Site Built for teams of 100 to 1,000+ Getting Started Watch our introduction video to quickly get started with Employee Directory. Employee Directory YouTube Playlist A collection of videos explaining Employee Directory concepts, features, and setup: RELATED PLUGINS YOU MAY LIKE Employee Spotlight: Display and manage staff profiles. Campus Directory: All-in-one directory for higher education institutions. Knowledge Center: Knowledge base software for helping customers and employees find answers. WP Ticket: Customer support and helpdesk ticketing. YouTube Showcase: Beautiful YouTube video galleries for WordPress. Request a Quote: Sales quoting solution for WordPress. Software Issue Manager: Issue and project management solution. WP Easy Contact: Contact management solution for WordPress. WP Easy Events: Event planning, ticketing, and insights for WordPress. Credits This plugin was generated using WP App Studio.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C