Extension WordPress
Vulnérabilités CM Business Directory – Optimise and showcase local business
Cette page rassemble les failles publiées pour CM Business Directory – Optimise and showcase local business, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de CM Business Directory – Optimise and showcase local business
4 fiches
CM Business Directory <= 1.5.7 – Authenticated (Contributor+) Stored Cross-Site Scripting via Business Address Meta Fields
The CM Business Directory – Optimise and showcase local business plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Business Address Meta Fields in all versions up to, and including, 1.5.7 due to insufficient input sanitization and…
*-1.5.7
1.5.8
02/07/2026
CM Business Directory – Optimise and showcase local business <= 1.5.3 – Authenticated (Author+) Stored Cross-Site Scripting
The CM Business Directory – Optimise and showcase local business plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.5.3 due to insufficient input sanitization and output escaping. This makes it possible…
*-1.5.3
1.5.4
16/01/2026
CM Business Directory <= 1.5.2 – Authenticated (Contributor+) Stored Cross-Site Scripting
The CM Business Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'cmbd_featured_image' shortcode in all versions up to, and including, 1.5.2 due to insufficient input sanitization and output escaping on user supplied attributes.…
*-1.5.2
1.5.3
25/09/2025
Multiple Plugins <= (Various Versions) – Reflected Cross-Site Scripting via cminds_free_guide Shortcode
Multiple plugins for WordPress are vulnerable to Reflected Cross-Site Scripting via the cminds_free_guide shortcode in various versions due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in…
*-1.4.1
1.4.2
25/11/2024
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.