Extension WordPress
Vulnérabilités Business Directory Plugin – Easy Listing Directories for WordPress
Cette page rassemble les failles publiées pour Business Directory Plugin – Easy Listing Directories for WordPress, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Business Directory Plugin – Easy Listing Directories for WordPress
19 fiches
Business Directory Plugin – Easy Listing Directories for WordPress <= 6.4.22 – Unauthenticated Stored Cross-Site Scripting
The Business Directory Plugin – Easy Listing Directories for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 6.4.22 due to insufficient input sanitization and output escaping. This makes it possible…
*-6.4.22
6.4.23
29/06/2026
Business Directory Plugin – Easy Listing Directories for WordPress <= 6.4.22 – Authenticated (Subscriber+) Stored Cross-Site Scripting
The Business Directory Plugin – Easy Listing Directories for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 6.4.22 due to insufficient input sanitization and output escaping. This makes it possible…
*-6.4.22
6.4.23
29/06/2026
Business Directory Plugin – Easy Listing Directories for WordPress <= 6.4.23 – Missing Authorization
The Business Directory Plugin – Easy Listing Directories for WordPress plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in versions up to, and including, 6.4.23. This makes it possible…
*-6.4.23
6.4.24
29/06/2026
Business Directory Plugin <= 6.4.20 – Missing Authorization to Unauthenticated Arbitrary Listing Modification
The Business Directory Plugin for WordPress is vulnerable to authorization bypass due to a missing authorization check in all versions up to, and including, 6.4.20. This makes it possible for unauthenticated attackers to modify arbitrary listings, including changing…
*-6.4.20
6.4.21
17/02/2026
Business Directory Plugin <= 6.4.21 – Unauthenticated SQL Injection via payment Parameter
The Business Directory Plugin – Easy Listing Directories for WordPress plugin for WordPress is vulnerable to time-based SQL Injection via the 'payment' parameter in all versions up to, and including, 6.4.2 due to insufficient escaping on the user…
*-6.4.21
6.4.22
17/02/2026
Business Directory <= 6.4.19 – Missing Authorization
The Business Directory Plugin – Easy Listing Directories for WordPress plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 6.4.19. This makes it…
*-6.4.19
6.4.20
15/12/2025
Business Directory <= 6.4.19 – Cross-Site Request Forgery
The Business Directory Plugin – Easy Listing Directories for WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 6.4.19. This is due to missing or incorrect nonce validation on a…
*-6.4.19
6.4.20
03/12/2025
Business Directory <= 6.4.18 – Missing Authorization
The Business Directory plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the dispatch() function in versions up to, and including, 6.4.18. This makes it possible for authenticated attackers, with…
*-6.4.18
6.4.19
19/10/2025
Business Directory Plugin – Easy Listing Directories for WordPress <= 6.4.14 – Insecure Direct Object Reference to Listing Arbitrary Image Addition
The Business Directory Plugin – Easy Listing Directories for WordPress plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 6.4.14 via the 'ajax_listing_submit_image_upload' function due to missing validation on a…
*-6.4.14
6.4.15
12/03/2025
Business Directory Plugin <= 6.4.3 – Authenticated (Author+) CSV Injection
The Business Directory Plugin plugin for WordPress is vulnerable to CSV Injection in versions up to, and including, 6.4.3 via the class-csv-exporter.php file. This allows authenticated attackers, with author-level permissions and above, to embed untrusted input into CSV…
*-6.4.3
6.4.4
17/06/2024
Business Directory Plugin – Easy Listing Directories for WordPress <= 6.4.2 – Unauthenticated SQL Injection via listingfields Parameter
The Business Directory Plugin – Easy Listing Directories for WordPress plugin for WordPress is vulnerable to time-based SQL Injection via the ‘listingfields’ parameter in all versions up to, and including, 6.4.2 due to insufficient escaping on the user…
*-6.4.2
6.4.3
21/05/2024
Business Directory Plugin <= 6.3.9 – Missing Authorization via dispatch
The Business Directory Plugin plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'dispatch' function in versions up to, and including, 6.3.9. This makes it possible for authenticated attackers,…
*-6.3.9
6.3.10
27/12/2023
Business Directory Plugin <= 6.3.10 – Cross-Site Request Forgery
The Business Directory Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 6.3.10. This is due to missing or incorrect nonce validation on an unknown function. This makes it possible for…
*-6.3.10
6.3.11
28/11/2023
Business Directory Plugin – Easy Listing Directories for WordPress <= 5.11.1 – Cross-Site Request Forgery to Arbitrary Listing Export
The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.2 suffered from a Cross-Site Request Forgery issue, allowing an attacker to make a logged in administrator export files, which could then be downloaded by…
*-5.11.1
5.11.2
12/04/2021
Business Directory Plugin <= 5.11.1 – Cross-Site Request Forgery to Arbitrary Payment History Update
The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.2 suffered from a Cross-Site Request Forgery issue, allowing an attacker to make a logged in administrator update arbitrary payment history, such as change their…
*-5.11.1
5.11.2
12/04/2021
Business Directory Plugin <= 5.11.1 – Authenticated Stored Cross-Site Scripting
The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.2 suffered from lack of sanitisation in the label of the Form Fields, leading to Authenticated Stored Cross-Site Scripting issues across various pages of the…
*-5.11.1
5.11.2
12/04/2021
Business Directory Plugin <= 5.10.1 – Cross-Site Request Forgery to Arbitrary File Upload
The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11 suffered from a Cross-Site Request Forgery issue, allowing an attacker to make a logged in administrator import files. As the plugin also did not…
*-5.10.1
5.11
11/04/2021
Business Directory Plugin < 5.11 – Cross-Site Request Forgery
The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.1 suffered from Cross-Site Request Forgery issues, allowing an attacker to make a logged in administrator add, edit or delete form fields, which could also…
*-5.11
5.11.1
11/04/2021
Business Directory Plugin <= 5.11 – Authenticated PHP4 Upload
The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.1 did not properly check for imported files, forbidding certain extension via a blacklist approach, allowing administrator to import an archive with a .php4 inside…
*-5.11
5.11.1
11/04/2021
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.