WP-BusinessDirectory – Business directory plugin for WordPress vulnerabilities
1 known vulnerability in WP-BusinessDirectory – Business directory plugin for WordPress from Cmsjunkie. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
1critical
0high
0exploited
9.1average CVSS score
Latest first
- 9.1 Critical severity
WP-BusinessDirectory – Business directory…: External Control of File Name or Path
The WP-BusinessDirectory plugin for WordPress is vulnerable to Unauthenticated Arbitrary File Deletion in versions up to and including 4.0.1. This is due to insufficient path validation in the remove() method of the JBusinessDirectoryControllerUpload class. Th