CMSJunkie - WordPress Business Directory Plugins vulnerabilities
We track 4 vulnerabilities in CMSJunkie - WordPress Business Directory Plugins products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on January 8, 2026.
Latest CMSJunkie - WordPress Business Directory Plugins vulnerabilities
- 7.1 High severity
WP-BusinessDirectory: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CMSJunkie - WordPress Business Directory Plugins WP-BusinessDirectory wp-businessdirectory allows Reflected XSS.This issue affects WP-BusinessDirectory: from
- 9.3 Critical severity
WP-BusinessDirectory: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CMSJunkie - WordPress Business Directory Plugins WP-BusinessDirectory wp-businessdirectory allows Blind SQL Injection.This issue affects WP-BusinessDirectory:
- 7.1 High severity
WP-BusinessDirectory: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CMSJunkie - WordPress Business Directory Plugins WP-BusinessDirectory wp-businessdirectory allows Reflected XSS.This issue affects WP-BusinessDirectory: from
- 8.6 High severity
WP-BusinessDirectory: Improper Limitation of a Pathname to a Restricted Directory
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in CMSJunkie - WordPress Business Directory Plugins WP-BusinessDirectory wp-businessdirectory allows Path Traversal.This issue affects WP-BusinessDirectory: from n/a t