businessdirectoryplugin records
4 published records for vendor businessdirectoryplugin.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 25%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-1236 Improper Neutralization of Formula Elements in a CSV File1
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-862 Missing Authorization1
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
The weakness classes this vendor ships most often: where to look.
CWEAll records
4 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
35Monitor | CVE-2023-5803No exploit | WordPress Business Directory Plugin Plugin <= 6.3.10 is vulnerable to Cross Site Request Forgery (CSRF)businessdirectoryplugin · business directory · CWE-352 | High8.8 | — | 0.3% | Nov 30, 2023 |
33Monitor | CVE-2024-4443Proof of concept | Business Directory Plugin – Easy Listing Directories for WordPress <= 6.4.2 - Unauthenticated SQL Injection via listingfields Parameterbusinessdirectoryplugin · business directory · CWE-89 | High7.5 | — | 10.4% | May 22, 2024 |
32Monitor | CVE-2023-5527No exploit | Business Directory Plugin <= 6.4.3 - Authenticated (Author+) CSV Injectionbusinessdirectoryplugin · business directory · CWE-1236 | High8.0 | — | 0.5% | Jun 18, 2024 |
21Monitor | CVE-2023-51516No exploit | WordPress Business Directory Plugin – Easy Listing Directories for WordPress plugin <= 6.3.9 - Broken Access Control vulnerabilitybusinessdirectoryplugin · business directory · CWE-862 | Medium5.4 | — | 0.3% | Jun 13, 2024 |
- CVE-2023-580335Monitor
WordPress Business Directory Plugin Plugin <= 6.3.10 is vulnerable to Cross Site Request Forgery (CSRF)
HighCVSS 8.8No exploitEPSS 0%businessdirectoryplugin · business directoryNov 30, 2023
- CVE-2024-444333Monitor
Business Directory Plugin – Easy Listing Directories for WordPress <= 6.4.2 - Unauthenticated SQL Injection via listingfields Parameter
HighCVSS 7.5Proof of conceptEPSS 10%businessdirectoryplugin · business directoryMay 22, 2024
- CVE-2023-552732Monitor
Business Directory Plugin <= 6.4.3 - Authenticated (Author+) CSV Injection
HighCVSS 8.0No exploitEPSS 0%businessdirectoryplugin · business directoryJun 18, 2024
- CVE-2023-5151621Monitor
WordPress Business Directory Plugin – Easy Listing Directories for WordPress plugin <= 6.3.9 - Broken Access Control vulnerability
MediumCVSS 5.4No exploitEPSS 0%businessdirectoryplugin · business directoryJun 13, 2024