Business Directory Plugin Easy Listing Directories
Approved changes feed: RSS · Atom
cpe:2.3:a:strategy11:business_directory_plugin_-_easy_listing_directories:*:*:*:*:*:wordpress:*:*
part: a version: * update: *
| Vendor | Strategy11 (d26626ee-601e-59cb-94c7-3e147cb2994a) |
|---|---|
| Product | Business Directory Plugin Easy Listing Directories (e5c57e47-117a-541b-886f-14b07f42955e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | wordpress |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-24251 |
vulnerable | 2026-06-08 05:30:04.053445 |
Business Directory Plugin < 5.11.2 - Arbitrary Payment History Update
The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.2 suffered from a Cross-Site Request Forgery issue, allowing an attacker to make a logged in administrator update arbitrary payment history, such as change their status (from pending to completed to example)
Published: 2021-05-05T18:39:43.000Z
Updated: 2024-08-03T19:28:22.248Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-24250 |
vulnerable | 2026-06-08 05:30:04.053147 |
Business Directory Plugin < 5.11.2 - Authenticated Stored Cross-Site Scripting
The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.2 suffered from lack of sanitisation in the label of the Form Fields, leading to Authenticated Stored Cross-Site Scripting issues across various pages of the plugin.
Published: 2021-05-05T18:39:43.000Z
Updated: 2024-08-03T19:21:18.860Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-24249 |
vulnerable | 2026-06-08 05:30:04.052852 |
Business Directory Plugin < 5.11.2 - Arbitrary Listing Export
The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.2 suffered from a Cross-Site Request Forgery issue, allowing an attacker to make a logged in administrator export files, which could then be downloaded by the attacker to get access to PII, such as email, home addresses etc
Published: 2021-05-05T18:39:43.000Z
Updated: 2024-08-03T19:21:18.826Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-24248 |
vulnerable | 2026-06-08 05:30:04.052534 |
Business Directory Plugin < 5.11.1 - Authenticated PHP4 Upload to RCE
The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.1 did not properly check for imported files, forbidding certain extension via a blacklist approach, allowing administrator to import an archive with a .php4 inside for example, leading to RCE
Published: 2021-05-05T18:39:43.000Z
Updated: 2024-08-03T19:21:18.654Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-24179 |
vulnerable | 2026-06-08 05:30:03.923009 |
Business Directory Plugin < 5.11 - Arbitrary File Upload to RCE
The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11 suffered from a Cross-Site Request Forgery issue, allowing an attacker to make a logged in administrator import files. As the plugin also did not validate uploaded files, it could lead to RCE.
Published: 2021-05-05T18:39:42.000Z
Updated: 2024-08-03T19:21:18.652Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-24178 |
vulnerable | 2026-06-08 05:30:03.922594 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.