WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
business-directory-plugin
Published
2026-02-17
Title
Business Directory Plugin < 6.4.21 - Missing Authorization to Unauthenticated Arbitrary Listing Modification
Slug
business-directory-plugin
Published
2026-02-17
Title
Business Directory Plugin < 6.4.22 - Unauthenticated SQL Injection via payment Parameter
Slug
business-directory-plugin
Published
2026-06-29
Title
Business Directory Plugin – Easy Listing Directories for WordPress < 6.4.23 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
business-directory-plugin
Published
2026-06-29
Title
Business Directory Plugin – Easy Listing Directories for WordPress < 6.4.24 - Missing Authorization
Slug
business-directory-plugin
Published
2026-06-29
Title
Business Directory Plugin – Easy Listing Directories for WordPress < 6.4.23 - Unauthenticated Stored Cross-Site Scripting
Slug
business-directory-plugin
Published
2026-07-28
Title
Business Directory Plugin – Easy Listing Directories for WordPress < 6.4.25 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
business-directory-plugin
Published
2026-08-12
Title
Business Directory < 6.4.26 - Unauthenticated Stored Cross-Site Scripting
Slug
business-directory-plugin
Published
2026-09-03
Title
Business Directory Plugin – Easy Listing & Member Directories for WordPress < 6.4.27 - Missing Authorization
Slug
business-directory-plugin
Published
2026-09-03
Title
Business Directory Plugin – Easy Listing & Member Directories for WordPress < 6.4.27 - Unauthenticated Insecure Direct Object Reference
Slug
business-hours-indicator
Published
2021-08-02
Title
Business Hours Indicator < 2.3.5 - Admin+ Stored Cross-Site Scripting
Slug
business-manager
Published
2021-10-14
Title
Business Manager < 1.4.6 - Admin+ Stored Cross-Site Scripting
Slug
business-profile
Published
2022-01-18
Title
Five Star Business Profile and Schema < 2.1.7 - Subscriber+ Page Creation & Settings Update to Stored XSS
Slug
business-profile
Published
2026-06-30
Title
Five Star Business Profile and Schema < 2.3.20 - Authenticated (Editor+) Arbitrary Code Execution
Slug
business-profile-reviews
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
business-reviews-wp
Published
2025-07-07
Title
Widget for Google Reviews < 1.0.16 - Authenticated (Subscriber+) Directory Traversal to Local File Inclusion
Slug
business-reviews-wp
Published
2025-07-16
Title
Widget for Google Reviews < 1.0.16 - Unauthenticated Local File Inclusion
Slug
button
Published
2023-05-12
Title
Button < 1.1.24 - Admin+ Stored XSS
Slug
button
Published
2024-03-28
Title
Button < 1.1.28 - Contributor+ PHP Object Injection in button_shortcode
Slug
button-block
Published
2024-11-20
Title
Button Block – Get fully customizable & multi-functional buttons < 1.1.5 - Authenticated (Contributor+) Post Disclosure
Slug
button-block
Published
2024-12-18
Title
Button Block – Get fully customizable & multi-functional buttons < 1.1.6 - Authenticated (Contributor+) Post Disclosure via Post Duplication
Slug
button-block
Published
2025-01-07
Title
Button Block < 1.2.0 - Contributor+ Stored XSS
Slug
button-block
Published
2025-01-13
Title
Button Block < 1.1.6 - Missing Authorization
Slug
button-block
Published
2025-07-30
Title
Button Block < 1.2.1 - Cross-Site Request Forgery
Slug
button-contact-vr
Published
2024-05-02
Title
Button contact VR < 4.7.7 - Admin+ Stored XSS
Slug
button-contact-vr
Published
2024-08-16
Title
Button contact VR < 4.7.8 - Admin+ Stored XSS