Read the docs

Connections-pro

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Connections-pro records in CISA KEV

No Connections-pro vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Connections Business Directory 3 records LOW Wp-syntax 1 record HIGH

Records

4 records

TI-2024-12945 CVE-2024-13926 · GHSA-p6jq-9gcc-mcvx

WP-Syntax <= 1.2 - Author+ Potential ReDoS

Priority HIGH 72

The WP-Syntax WordPress plugin through 1.2 does not properly handle input, allowing an attacker to create a post containing a large number of tags, thereby exploiting a catastrophic backtracking issue in the regular expr…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00502 Published 2025-04-19 No fix listed CWE-1333
TI-2020-18743 CVE-2020-36503 · GHSA-cv8q-93v6-rxm5

Connections Business Directory < 9.7 - Admin+ CSV Injection

Priority LOW 37

The Connections Business Directory WordPress plugin before 9.7 does not validate or sanitise some connections' fields, which could lead to a CSV injection issue

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.01247 Published 2021-11-01 Fixed in 9.7 CWE-1236
TI-2021-07076 CVE-2021-24794 · GHSA-2p79-p2xq-4xwj

Connections Business Directory < 10.4.3 - Admin+ Stored Cross-Site Scripting

Priority LOW 23

The Connections Business Directory WordPress plugin before 10.4.3 does not escape the Address settings when creating an Entry, which could allow high privilege users to perform Cross-Site Scripting when the unfiltered_ht…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00728 Published 2021-11-01 Fixed in 10.4.3 CWE-79
Open these records in search →