Business Directory Plugin – Easy Listing Directories For Wordpress
Approved changes feed: RSS · Atom
cpe:2.3:a:business_directory_team:business_directory_plugin_–_easy_listing_directories_for_wordpress:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Business Directory Team (62118bd4-1fce-5b49-9c81-30fd3e9b7357) |
|---|---|
| Product | Business Directory Plugin – Easy Listing Directories For Wordpress (f572c314-0fb1-5714-abdd-e8e4803993a9) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-5803 |
vulnerable | 2026-06-08 06:19:44.797108 |
WordPress Business Directory Plugin Plugin <= 6.3.10 is vulnerable to Cross Site Request Forgery (CSRF)
MEDIUM (4.3)
Cross-Site Request Forgery (CSRF) vulnerability in Business Directory Team Business Directory Plugin – Easy Listing Directories for WordPress allows Cross-Site Request Forgery.This issue affects Business Directory Plugin – Easy Listing Directories for WordPress: from n/a through 6.3.10.
Published: 2023-11-30T15:57:05.929Z
Updated: 2026-04-28T16:09:07.464Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-24251 |
vulnerable | 2026-06-08 05:30:04.053416 |
Business Directory Plugin < 5.11.2 - Arbitrary Payment History Update
The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.2 suffered from a Cross-Site Request Forgery issue, allowing an attacker to make a logged in administrator update arbitrary payment history, such as change their status (from pending to completed to example)
Published: 2021-05-05T18:39:43.000Z
Updated: 2024-08-03T19:28:22.248Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-24250 |
vulnerable | 2026-06-08 05:30:04.053117 |
Business Directory Plugin < 5.11.2 - Authenticated Stored Cross-Site Scripting
The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.2 suffered from lack of sanitisation in the label of the Form Fields, leading to Authenticated Stored Cross-Site Scripting issues across various pages of the plugin.
Published: 2021-05-05T18:39:43.000Z
Updated: 2024-08-03T19:21:18.860Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-24249 |
vulnerable | 2026-06-08 05:30:04.052820 |
Business Directory Plugin < 5.11.2 - Arbitrary Listing Export
The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.2 suffered from a Cross-Site Request Forgery issue, allowing an attacker to make a logged in administrator export files, which could then be downloaded by the attacker to get access to PII, such as email, home addresses etc
Published: 2021-05-05T18:39:43.000Z
Updated: 2024-08-03T19:21:18.826Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-24248 |
vulnerable | 2026-06-08 05:30:04.052496 |
Business Directory Plugin < 5.11.1 - Authenticated PHP4 Upload to RCE
The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.1 did not properly check for imported files, forbidding certain extension via a blacklist approach, allowing administrator to import an archive with a .php4 inside for example, leading to RCE
Published: 2021-05-05T18:39:43.000Z
Updated: 2024-08-03T19:21:18.654Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-24179 |
vulnerable | 2026-06-08 05:30:03.922971 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-24178 |
vulnerable | 2026-06-08 05:30:03.921911 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.