WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
business-card-block
Published
2025-02-23
Title
Business Card Block < 1.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
business-card-by-esterox-100
Published
2024-05-06
Title
Business Card <= 1.0.0 - Arbitrary Card Deletion via CSRF
Slug
business-card-by-esterox-100
Published
2024-05-06
Title
Business Card <= 1.0.0 - Card Edit via CSRF
Slug
business-card-by-esterox-100
Published
2024-05-06
Title
Business Card <= 1.0.0 - Category Deletion via CSRF
Slug
business-card-by-esterox-100
Published
2024-05-06
Title
Business Card <= 1.0.0 - Category Edit via CSRF
Slug
business-card-by-esterox-100
Published
2024-07-09
Title
Business Card <= 1.0.0 - Admin+ File Upload
Slug
business-contact-widget
Published
2025-04-24
Title
Business Contact Widget <= 2.7.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
business-directory-plugin
Published
2021-04-11
Title
Business Directory Plugin < 5.11.1 - Arbitrary Add/Edit/Delete Form Field to Stored XSS
Slug
business-directory-plugin
Published
2021-04-11
Title
Business Directory Plugin < 5.11 - Arbitrary File Upload to RCE
Slug
business-directory-plugin
Published
2021-04-12
Title
Business Directory Plugin < 5.11.2 - Authenticated Stored Cross-Site Scripting
Slug
business-directory-plugin
Published
2021-04-11
Title
Business Directory Plugin < 5.11.1 - Authenticated PHP4 Upload to RCE
Slug
business-directory-plugin
Published
2021-04-12
Title
Business Directory Plugin < 5.11.2 - Arbitrary Listing Export
Slug
business-directory-plugin
Published
2021-04-12
Title
Business Directory Plugin < 5.11.2 - Arbitrary Payment History Update
Slug
business-directory-plugin
Published
2023-11-28
Title
Business Directory Plugin < 6.3.11 - Cross-Site Request Forgery
Slug
business-directory-plugin
Published
2023-12-27
Title
Business Directory Plugin < 6.3.10 - Contributor+ Arbitrary Listing Deletion
Slug
business-directory-plugin
Published
2024-05-21
Title
Business Directory Plugin – Easy Listing Directories for WordPress < 6.4.3 - Unauthenticated SQL Injection via listingfields Parameter
Slug
business-directory-plugin
Published
2024-06-17
Title
Business Directory Plugin < 6.4.4 - Authenticated (Author+) CSV Injection
Slug
business-directory-plugin
Published
2025-03-12
Title
Business Directory Plugin - Easy Listing Directories for WordPress < 6.4.15 - Insecure Direct Object Reference to Listing Arbitrary Image Addition
Slug
business-directory-plugin
Published
2025-10-19
Title
Business Directory < 6.4.19 - Missing Authorization
Slug
business-directory-plugin
Published
2025-12-03
Title
Business Directory < 6.4.20 - Cross-Site Request Forgery
Slug
business-directory-plugin
Published
2025-12-15
Title
Business Directory < 6.4.20 - Missing Authorization
Slug
business-directory-plugin
Published
2026-02-17
Title
Business Directory Plugin < 6.4.21 - Missing Authorization to Unauthenticated Arbitrary Listing Modification
Slug
business-directory-plugin
Published
2026-02-17
Title
Business Directory Plugin < 6.4.22 - Unauthenticated SQL Injection via payment Parameter
Slug
business-hours-indicator
Published
2021-08-02
Title
Business Hours Indicator < 2.3.5 - Admin+ Stored Cross-Site Scripting
Slug
business-manager
Published
2021-10-14
Title
Business Manager < 1.4.6 - Admin+ Stored Cross-Site Scripting