Business Directory Plugin – Easy Listing Directories for WordPress vulnerabilities
3 known vulnerabilities in Business Directory Plugin – Easy Listing Directories for WordPress from Strategy11team. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.5 High severity
Business Directory Plugin – Easy Listing…: Improper Neutralization of Special Elements used in an SQL Command
The Business Directory Plugin – Easy Listing Directories for WordPress plugin for WordPress is vulnerable to time-based SQL Injection via the 'payment' parameter in all versions up to, and including, 6.4.2 due to insufficient escaping on the user supplied para
- 8.0 High severity
Business Directory Plugin – Easy Listing…: Improper Neutralization of Formula Elements in a CSV File
The Business Directory Plugin plugin for WordPress is vulnerable to CSV Injection in versions up to, and including, 6.4.3 via the class-csv-exporter.php file. This allows authenticated attackers, with author-level permissions and above, to embed untrusted inpu
- 7.5 High severity
Business Directory Plugin – Easy Listing…: Improper Neutralization of Special Elements used in an SQL Command
The Business Directory Plugin – Easy Listing Directories for WordPress plugin for WordPress is vulnerable to time-based SQL Injection via the ‘listingfields’ parameter in all versions up to, and including, 6.4.2 due to insufficient escaping on the user supplie