Hi @imokweb,
Thank you for reporting this.
These vulnerabilities have already been fixed and patched in the latest version of the plugin. The Patchstack listing may still show the issue because it can take some time for their team to review and update the status after a patch is released.
Please make sure you update Directorist to the latest version to ensure your site remains secure.
If you have any questions or notice anything unusual after updating, feel free to let us know.
hi @alamin56649
Just in case there is something more left there, they have changed the title to for the posts and they say that WordPress Directorist Plugin <= 8.6.3 is vulnerable to a medium priority Broken Access Control, WordPress Directorist Plugin <= 8.6.3 is vulnerable to Open Redirection
thanks