Lawyer Directory

Lawyer Directory has 5 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2026; 3 are fixed and 2 remain unpatched as of September 2026. Their average CVSS score is 6.9, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 3 high. 2026 was the busiest year with 4 disclosures.

The most common weakness is Incorrect Privilege Assignment, behind 2 of the records (40%). Other recurring categories include Missing Authorization, Cross-Site Scripting.

3 of the records (60%) have a vendor fix, while 2 remain unpatched. The oldest unresolved one dates back to 2026.

3 independent researchers contributed these findings, most of them (3) reported by Phat RiO.

01234567891006.03.2023Today06.03.20238.8Multiple E-plugins (Various Versions) - Authenticated (Subscriber+) Privilege Escalation CVSS 8.8 · 06.03.202321.01.20268.8Lawyer Directory <= 1.3.3 - Authenticated (Subscriber+) Privilege Escalation CVSS 8.8 · 21.01.202622.01.20265.3Lawyer Directory <= 1.3.4 - Missing Authorization CVSS 5.3 · 22.01.20264.3Lawyer Directory <= 1.3.3 - Missing Authorization CVSS 4.3 · 22.01.202626.02.20267.2Lawyer Directory <= 1.3.2 - Unauthenticated Stored Cross-Site Scripting CVSS 7.2 · 26.02.2026

Strategic Overview

Avg CVSSMedium
6.9/ 10
Patch Coverage60%
Open

2

Fixed

3

Get automatic notifications for all Lawyer Directory vulnerabilities before they are exploited.

Most severe open issueCVSS 7.2CVE-2026-28127

Lawyer Directory <= 1.3.2 - Unauthenticated Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

5 records
Showing 1–5 of 5 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C