Approved changes feed: RSS · Atom

cpe:2.3:a:strategy11_team:business_directory:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorStrategy11 Team (b29cf4d0-2d09-5fef-a5e2-96aa36447d46)
ProductBusiness Directory (1132b4f7-df7e-5153-a754-6919de0be2a8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-57339 vulnerable 2026-07-29 01:00:29.623611 WordPress Business Directory plugin <= 6.4.23 - Broken Access Control vulnerability
MEDIUM (6.6)
Unauthenticated Broken Access Control in Business Directory <= 6.4.23 versions.
Published: 2026-06-29T13:36:41.106Z
Updated: 2026-06-29T15:51:01.110Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-57328 vulnerable 2026-07-29 01:00:29.609168 WordPress Business Directory plugin <= 6.4.22 - Cross Site Scripting (XSS) vulnerability
MEDIUM (6.5)
Subscriber Cross Site Scripting (XSS) in Business Directory <= 6.4.22 versions.
Published: 2026-06-29T13:36:33.818Z
Updated: 2026-06-29T15:51:34.682Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-57326 vulnerable 2026-07-29 01:00:29.607869 WordPress Business Directory plugin <= 6.4.22 - Cross Site Scripting (XSS) vulnerability
MEDIUM (6.5)
Unauthenticated Cross Site Scripting (XSS) in Business Directory <= 6.4.22 versions.
Published: 2026-06-29T13:36:32.484Z
Updated: 2026-06-29T15:06:51.848Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-67596 vulnerable 2026-06-08 07:41:20.054430 WordPress Business Directory plugin <= 6.4.19 - Cross Site Request Forgery (CSRF) vulnerability
MEDIUM (4.3)
Cross-Site Request Forgery (CSRF) vulnerability in Strategy11 Team Business Directory business-directory-plugin allows Cross Site Request Forgery.This issue affects Business Directory: from n/a through <= 6.4.19.
Published: 2025-12-09T14:14:18.627Z
Updated: 2026-04-28T16:14:22.228Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-64630 vulnerable 2026-06-08 07:39:19.953023 WordPress Business Directory plugin <= 6.4.19 - Broken Access Control vulnerability
MEDIUM (4.9)
Missing Authorization vulnerability in Strategy11 Team Business Directory business-directory-plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Business Directory: from n/a through <= 6.4.19.
Published: 2025-12-16T08:12:50.318Z
Updated: 2026-04-28T16:14:15.185Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-64219 vulnerable 2026-06-08 07:39:18.233010 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.