Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Business Directory Plugin – Easy Listing Directories for WordPress — Vulnerabilities & Security Advisories 12

All 12 CVE vulnerabilities found in Business Directory Plugin – Easy Listing Directories for WordPress, with AI-generated Chinese analysis, references, and POCs.

This page documents known security weaknesses affecting the Business Directory Plugin, a popular WordPress extension for creating listing directories. It focuses on Common Weakness Enumerations associated with this specific vendor and software ecosystem. The content aggregates vulnerability records identified within the software, covering a broad historical range from initial releases to recent updates. This collection includes various vulnerability classes such as cross-site scripting, SQL injection, and improper access control flaws that have been reported by users or security researchers. The data is organized to provide a clear timeline of security issues discovered over time, allowing for comprehensive tracking of the product’s security posture. Visitors to this page can discover detailed information about how specific weaknesses have impacted the plugin’s functionality and data integrity. You can track the vendor’s response to security advisories and observe patterns in reported issues to assess risk levels. Furthermore, this resource helps users understand the nature of each weakness class, offering context on how these vulnerabilities typically manifest in similar WordPress environments. It also enables a review of the product’s vulnerability history, providing insights into past security incidents and the effectiveness of subsequent patches. This information supports informed decision-making for administrators and developers who rely on this directory solution, highlighting areas that require attention or mitigation strategies to ensure a safer deployment.

Vendor: Business Directory Team

CVE ID Title CVSS Severity Published
CVE-2026-1656 Business Directory Plugin <= 6.4.20 - Missing Authorization to Unauthenticated Arbitrary Listing Modification CWE-862 5.3 Medium 2026-02-18
CVE-2026-2576 Business Directory Plugin <= 6.4.21 - Unauthenticated SQL Injection via payment Parameter CWE-89 7.5 High 2026-02-18
CVE-2024-13887 Business Directory Plugin - Easy Listing Directories for WordPress <= 6.4.14 - Insecure Direct Object Reference to Listing Arbitrary Image Addition CWE-639 5.3 Medium 2025-03-13
CVE-2023-5527 Business Directory Plugin <= 6.4.3 - Authenticated (Author+) CSV Injection CWE-1236 7.4 High 2024-06-18
CVE-2024-4443 Business Directory Plugin – Easy Listing Directories for WordPress <= 6.4.2 - Unauthenticated SQL Injection via listingfields Parameter CWE-89 9.8 Critical 2024-05-22
CVE-2023-5803 WordPress Business Directory Plugin Plugin <= 6.3.10 is vulnerable to Cross Site Request Forgery (CSRF) CWE-352 4.3 Medium 2023-11-30
CVE-2021-24248 Business Directory Plugin < 5.11.1 - Authenticated PHP4 Upload to RCE CWE-434 7.2 - 2021-05-05
CVE-2021-24249 Business Directory Plugin < 5.11.2 - Arbitrary Listing Export CWE-352 6.5 - 2021-05-05
CVE-2021-24250 Business Directory Plugin < 5.11.2 - Authenticated Stored Cross-Site Scripting CWE-79 5.4 - 2021-05-05
CVE-2021-24251 Business Directory Plugin < 5.11.2 - Arbitrary Payment History Update CWE-352 4.3 - 2021-05-05
CVE-2021-24178 Business Directory Plugin < 5.11.1 - Arbitrary Add/Edit/Delete Form Field to Stored XSS CWE-352 8.1 - 2021-05-05
CVE-2021-24179 Business Directory Plugin < 5.11 - Arbitrary File Upload to RCE CWE-352 8.8 - 2021-05-05

All 12 known CVE vulnerabilities affecting Business Directory Plugin – Easy Listing Directories for WordPress with full Chinese analysis, references, and POCs where available.