Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Business Directory Plugin – Easy Listing Directories for WordPress 5.11.1 Clear all filters
TI-2021-06540 CVE-2021-24248 · GHSA-954q-pwww-w7g3

Business Directory Plugin < 5.11.1 - Authenticated PHP4 Upload to RCE

Priority LOW 35

The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.1 did not properly check for imported files, forbidding certain extension via a blacklist approach, allowing administrat…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01583 Published 2021-05-05 Fixed in 5.11.1 CWE-434
TI-2021-06470 CVE-2021-24178 · GHSA-4r7v-8p9v-gphx

Business Directory Plugin < 5.11.1 - Arbitrary Add/Edit/Delete Form Field to Stored XSS

Priority LOW 39

The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.1 suffered from Cross-Site Request Forgery issues, allowing an attacker to make a logged in administrator add, edit or d…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00672 Published 2021-05-05 Fixed in 5.11.1 CWE-352