The Directorist WordPress plugin suffers from a CWE-22 path traversal vulnerability due to inadequate file path validation in the add_listing_action AJAX endpoint. This allows unauthenticated attackers to arbitrarily move files on the server, potentially enabling remote code execution by relocating sensitive files such as wp-config.php. The vulnerability affects all versions up to and including 8.4.8 and has a CVSS 3.1 base score of 8.1, indicating high impact on integrity and availability with network attack vector and low attack complexity requiring privileges.

An attacker can move arbitrary files on the affected server without authentication, which can lead to remote code execution if critical files are manipulated. This compromises the integrity and availability of the affected system. There are no known exploits in the wild reported at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the vulnerable AJAX action if possible and monitor for suspicious activity related to file operations in the plugin. Avoid exposing the plugin to untrusted users or networks.