The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11 suffered from a Cross-Site Request Forgery issue, allowing an attacker to make a logged in administrator import files.
CVSS 3.1HIGH 8.8·Network·No auth·User interaction·EPSS 0.00672·Published 2021-05-05·Fixed in 5.11CWE-352
The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.1 suffered from Cross-Site Request Forgery issues, allowing an attacker to make a logged in administrator add, edit or d…
CVSS 3.1HIGH 8.8·Network·No auth·User interaction·EPSS 0.00672·Published 2021-05-05·Fixed in 5.11.1CWE-352
The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.1 did not properly check for imported files, forbidding certain extension via a blacklist approach, allowing administrat…
CVSS 3.1HIGH 7.2·Network·High privileges·No interaction·EPSS 0.01583·Published 2021-05-05·Fixed in 5.11.1CWE-434
The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.2 suffered from a Cross-Site Request Forgery issue, allowing an attacker to make a logged in administrator export files,…
CVSS 3.1MEDIUM 6.5·Network·No auth·User interaction·EPSS 0.00708·Published 2021-05-05·Fixed in 5.11.2CWE-352
The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.2 suffered from lack of sanitisation in the label of the Form Fields, leading to Authenticated Stored Cross-Site Scripti…
CVSS 3.1MEDIUM 5.4·Network·Low privileges·User interaction·EPSS 0.00645·Published 2021-05-05·Fixed in 5.11.2CWE-79
The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.2 suffered from a Cross-Site Request Forgery issue, allowing an attacker to make a logged in administrator update arbitr…
CVSS 3.1MEDIUM 4.3·Network·No auth·User interaction·EPSS 0.00474·Published 2021-05-05·Fixed in 5.11.2CWE-352