Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Business Directory Plugin – Easy Listing Directories for WordPress 5.11.2 Clear all filters
TI-2021-06543 CVE-2021-24251 · GHSA-wmmj-gjqw-jvhf

Business Directory Plugin < 5.11.2 - Arbitrary Payment History Update

Priority LOW 21

The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.2 suffered from a Cross-Site Request Forgery issue, allowing an attacker to make a logged in administrator update arbitr…

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00474 Published 2021-05-05 Fixed in 5.11.2 CWE-352
TI-2021-06542 CVE-2021-24250 · GHSA-5wm3-f8mj-hp67

Business Directory Plugin < 5.11.2 - Authenticated Stored Cross-Site Scripting

Priority LOW 25

The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.2 suffered from lack of sanitisation in the label of the Form Fields, leading to Authenticated Stored Cross-Site Scripti…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00645 Published 2021-05-05 Fixed in 5.11.2 CWE-79
TI-2021-06541 CVE-2021-24249 · GHSA-h96r-5v99-5m55

Business Directory Plugin < 5.11.2 - Arbitrary Listing Export

Priority LOW 30

The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.2 suffered from a Cross-Site Request Forgery issue, allowing an attacker to make a logged in administrator export files,…

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00708 Published 2021-05-05 Fixed in 5.11.2 CWE-352