TI-2026-28565 CVE-2026-39591 · GHSA-w5jv-9w5f-54r3
WordPress WP-BusinessDirectory plugin <= 4.0.0 - Arbitrary File Upload vulnerability
Priority MEDIUM 49
Subscriber Arbitrary File Upload in WP-BusinessDirectory <= 4.0.0 versions.
Vulnerabilities
5 records
TI-2025-42346 CVE-2025-68887 · GHSA-hxwj-3426-mwmr
WordPress WP-BusinessDirectory plugin <= 4.0.1 - Cross Site Scripting (XSS) vulnerability
Priority LOW 31
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CMSJunkie - WordPress Business Directory Plugins WP-BusinessDirectory wp-businessdirectory allows Reflected XSS.This i…
TI-2025-18476 CVE-2025-24759 · GHSA-9cwg-5hhf-w75m
WordPress WP-BusinessDirectory <= 3.1.5 - SQL Injection vulnerability
Priority MEDIUM 46
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CMSJunkie - WordPress Business Directory Plugins WP-BusinessDirectory wp-businessdirectory allows Blind SQL Injection.…
TI-2025-23695 CVE-2025-32630 · GHSA-x7h2-q5j9-qrmx
WordPress WP-BusinessDirectory Plugin <= 3.1.2 - Reflected Cross Site Scripting (XSS) vulnerability
Priority LOW 31
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CMSJunkie - WordPress Business Directory Plugins WP-BusinessDirectory wp-businessdirectory allows Reflected XSS.This i…
TI-2025-23694 CVE-2025-32629 · GHSA-gh7h-9vrx-5pc9
WordPress WP-BusinessDirectory Plugin <= 3.1.2 - Arbitrary File Deletion vulnerability
Priority MEDIUM 45
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in CMSJunkie - WordPress Business Directory Plugins WP-BusinessDirectory wp-businessdirectory allows Path Traversal.This issue…