Vulnerabilities

TI-2026-63359 CVE-2026-94173 · GHSA-cq3j-wj6g-q93r

WordPress Business Directory plugin <= 6.4.27 - Insecure Direct Object References (IDOR) vulnerability

LOW 24

Contributor Insecure Direct Object References (IDOR) in Business Directory <= 6.4.27 versions.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00203 Published 2026-09-30 No fix listed CWE-639

TI-2026-58270 CVE-2026-84769 · GHSA-9w4w-3jc8-f8mr

WordPress Business Directory plugin <= 6.4.26 - Insecure Direct Object References (IDOR) vulnerability

LOW 34

Unauthenticated Insecure Direct Object References (IDOR) in Business Directory <= 6.4.26 versions.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00266 Published 2026-09-03 No fix listed CWE-639

TI-2026-58259 CVE-2026-84758 · GHSA-427j-7j55-4h7g

WordPress Business Directory plugin <= 6.4.26 - Broken Access Control vulnerability

LOW 35

Unauthenticated Broken Access Control in Business Directory <= 6.4.26 versions.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00332 Published 2026-09-03 No fix listed CWE-862

TI-2026-22345 CVE-2026-28004 · GHSA-w578-wmpc-67cr

WordPress Business Directory plugin <= 6.4.25 - Cross Site Scripting (XSS) vulnerability

LOW 31

Unauthenticated Cross Site Scripting (XSS) in Business Directory <= 6.4.25 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00251 Published 2026-08-13 No fix listed CWE-79

TI-2026-44331 CVE-2026-61959 · GHSA-cv33-h348-47m4

WordPress Business Directory plugin <= 6.4.24 - Cross Site Scripting (XSS) vulnerability

LOW 28

Subscriber Cross Site Scripting (XSS) in Business Directory <= 6.4.24 versions.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00224 Published 2026-08-06 No fix listed CWE-79

TI-2026-42513 CVE-2026-59550 · GHSA-7357-fr34-38wf

WordPress AWP Classifieds plugin <= 4.4.7 - SQL Injection vulnerability

MEDIUM 46

Unauthenticated SQL Injection in AWP Classifieds <= 4.4.7 versions.

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.004 Published 2026-07-27 No fix listed CWE-89

TI-2026-46639 CVE-2026-65469 · GHSA-mf55-cgjw-rpg2

WordPress AWP Classifieds plugin <= 4.4.7 - Broken Access Control vulnerability

LOW 30

Unauthenticated Broken Access Control in AWP Classifieds <= 4.4.7 versions.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00294 Published 2026-07-23 No fix listed CWE-862

TI-2026-41276 CVE-2026-57339 · GHSA-m542-2fpm-5vj8

WordPress Business Directory plugin <= 6.4.23 - Broken Access Control vulnerability

LOW 29

Unauthenticated Broken Access Control in Business Directory <= 6.4.23 versions.

CVSS 3.1MEDIUM 6.6 Network No auth No interaction EPSS 0.00332 Published 2026-06-29 No fix listed CWE-862

TI-2026-41265 CVE-2026-57328 · GHSA-mfg7-q8ff-25x2

WordPress Business Directory plugin <= 6.4.22 - Cross Site Scripting (XSS) vulnerability

LOW 28

Subscriber Cross Site Scripting (XSS) in Business Directory <= 6.4.22 versions.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00224 Published 2026-06-29 No fix listed CWE-79

TI-2026-41263 CVE-2026-57326 · GHSA-j7vw-hgqm-mjq6

WordPress Business Directory plugin <= 6.4.22 - Cross Site Scripting (XSS) vulnerability

LOW 28

Unauthenticated Cross Site Scripting (XSS) in Business Directory <= 6.4.22 versions.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00253 Published 2026-06-29 No fix listed CWE-79

TI-2026-30949 CVE-2026-42726 · GHSA-83j6-9m62-75cr

WordPress AWP Classifieds plugin <= 4.4.5 - Broken Access Control vulnerability

LOW 34

Missing Authorization vulnerability in Strategy11 Team AWP Classifieds another-wordpress-classifieds-plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AWP Classifieds: from…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00242 Published 2026-05-27 No fix listed CWE-862

TI-2026-19833 CVE-2026-24593 · GHSA-c82p-3fr5-pxcv

WordPress AWP Classifieds plugin <= 4.4.3 - Sensitive Data Exposure vulnerability

LOW 30

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Strategy11 Team AWP Classifieds another-wordpress-classifieds-plugin allows Retrieve Embedded Sensitive Data.This issue affects…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00338 Published 2026-01-23 No fix listed CWE-497

TI-2025-38453 CVE-2025-62131 · GHSA-rc79-85vx-66wv

WordPress Tasty Recipes Lite plugin <= 1.1.5 - Broken Access Control vulnerability

LOW 19

Missing Authorization vulnerability in Strategy11 Team Tasty Recipes Lite tasty-recipes-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tasty Recipes Lite: from n/a through…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00181 Published 2025-12-31 No fix listed CWE-862

TI-2025-38454 CVE-2025-62132 · GHSA-98hg-6c5q-j7jq

WordPress Tasty Recipes Lite plugin <= 1.1.5 - Broken Access Control vulnerability

LOW 20

Missing Authorization vulnerability in Strategy11 Team Tasty Recipes Lite tasty-recipes-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tasty Recipes Lite: from n/a through…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00231 Published 2025-12-31 No fix listed CWE-862

TI-2025-39998 CVE-2025-64630 · GHSA-297g-gfvh-fg6g

WordPress Business Directory plugin <= 6.4.19 - Broken Access Control vulnerability

LOW 22

Missing Authorization vulnerability in Strategy11 Team Business Directory business-directory-plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Business Directory: from n/a…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00341 Published 2025-12-16 No fix listed CWE-862

TI-2025-41350 CVE-2025-67596 · GHSA-c3p5-fcjv-492q

WordPress Business Directory plugin <= 6.4.19 - Cross Site Request Forgery (CSRF) vulnerability

LOW 19

Cross-Site Request Forgery (CSRF) vulnerability in Strategy11 Team Business Directory business-directory-plugin allows Cross Site Request Forgery.This issue affects Business Directory: from n/a through <= 6.4.19.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00119 Published 2025-12-09 No fix listed CWE-352

TI-2025-39662 CVE-2025-64219 · GHSA-gvvw-5fwr-fmr3

WordPress Business Directory plugin <= 6.4.18 - Broken Access Control vulnerability

LOW 19

Missing Authorization vulnerability in Strategy11 Team Business Directory business-directory-plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Business Directory: from n/a…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00194 Published 2025-10-29 No fix listed CWE-862

TI-2025-35781 CVE-2025-57928 · GHSA-hxhg-xc8r-4fjw

WordPress AWP Classifieds plugin <= 4.4.3 - Content Injection vulnerability

LOW 30

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Strategy11 Team AWP Classifieds another-wordpress-classifieds-plugin allows Code Injection.This issue affects AWP Classifieds…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00316 Published 2025-09-22 No fix listed CWE-80

TI-2025-22621 CVE-2025-31440 · GHSA-77v8-cxj6-2cjq

WordPress Terms of Use plugin <= 2.0 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability

LOW 30

Cross-Site Request Forgery (CSRF) vulnerability in Strategy11 Team Terms of Use terms-of-use-2 allows Stored XSS.This issue affects Terms of Use: from n/a through <= 2.0.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00134 Published 2025-03-28 No fix listed CWE-352

Vulnerabilities

Filters