Read the docs

CMSJunkie - WordPress Business Directory Plugins

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

CMSJunkie - WordPress Business Directory Plugins records in CISA KEV

No CMSJunkie - WordPress Business Directory Plugins vulnerabilities are listed in CISA KEV.

Records

5 records

TI-2025-18476 CVE-2025-24759 · GHSA-9cwg-5hhf-w75m

WordPress WP-BusinessDirectory <= 3.1.5 - SQL Injection vulnerability

Priority MEDIUM 46

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CMSJunkie - WordPress Business Directory Plugins WP-BusinessDirectory wp-businessdirectory allows Blind SQL Injection.…

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.0041 Published 2025-07-16 No fix listed CWE-89
TI-2025-23694 CVE-2025-32629 · GHSA-gh7h-9vrx-5pc9

WordPress WP-BusinessDirectory Plugin <= 3.1.2 - Arbitrary File Deletion vulnerability

Priority MEDIUM 45

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in CMSJunkie - WordPress Business Directory Plugins WP-BusinessDirectory wp-businessdirectory allows Path Traversal.This issue…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.0081 Published 2025-04-11 No fix listed CWE-22
TI-2025-23695 CVE-2025-32630 · GHSA-x7h2-q5j9-qrmx

WordPress WP-BusinessDirectory Plugin <= 3.1.2 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CMSJunkie - WordPress Business Directory Plugins WP-BusinessDirectory wp-businessdirectory allows Reflected XSS.This i…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00293 Published 2025-04-17 No fix listed CWE-79
Open these records in search →