Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

6 records

Vendor: strategy11team Component: Business Directory Plugin - Easy Listing Directories Clear all filters
TI-2021-06543 CVE-2021-24251 · GHSA-wmmj-gjqw-jvhf

Business Directory Plugin < 5.11.2 - Arbitrary Payment History Update

Priority LOW 21

The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.2 suffered from a Cross-Site Request Forgery issue, allowing an attacker to make a logged in administrator update arbitr…

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00474 Published 2021-05-05 Fixed in 5.11.2 CWE-352
TI-2021-06542 CVE-2021-24250 · GHSA-5wm3-f8mj-hp67

Business Directory Plugin < 5.11.2 - Authenticated Stored Cross-Site Scripting

Priority LOW 25

The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.2 suffered from lack of sanitisation in the label of the Form Fields, leading to Authenticated Stored Cross-Site Scripti…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00645 Published 2021-05-05 Fixed in 5.11.2 CWE-79
TI-2021-06541 CVE-2021-24249 · GHSA-h96r-5v99-5m55

Business Directory Plugin < 5.11.2 - Arbitrary Listing Export

Priority LOW 30

The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.2 suffered from a Cross-Site Request Forgery issue, allowing an attacker to make a logged in administrator export files,…

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00708 Published 2021-05-05 Fixed in 5.11.2 CWE-352
TI-2021-06540 CVE-2021-24248 · GHSA-954q-pwww-w7g3

Business Directory Plugin < 5.11.1 - Authenticated PHP4 Upload to RCE

Priority LOW 35

The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.1 did not properly check for imported files, forbidding certain extension via a blacklist approach, allowing administrat…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01583 Published 2021-05-05 Fixed in 5.11.1 CWE-434
TI-2021-06471 CVE-2021-24179 · GHSA-6c3r-rv4h-9wfr

Business Directory Plugin < 5.11 - Arbitrary File Upload to RCE

Priority LOW 39

The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11 suffered from a Cross-Site Request Forgery issue, allowing an attacker to make a logged in administrator import files.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00672 Published 2021-05-05 Fixed in 5.11 CWE-352
TI-2021-06470 CVE-2021-24178 · GHSA-4r7v-8p9v-gphx

Business Directory Plugin < 5.11.1 - Arbitrary Add/Edit/Delete Form Field to Stored XSS

Priority LOW 39

The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.1 suffered from Cross-Site Request Forgery issues, allowing an attacker to make a logged in administrator add, edit or d…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00672 Published 2021-05-05 Fixed in 5.11.1 CWE-352