The Directorist WordPress plugin prior to 7.4.4 does not prevent users with low privileges (like subscribers) from accessing sensitive system information.
wpwax directorist