CVE Intelligence

Strategy11team Business Directory vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Strategy11team Business Directory: 11 record(s), with affected versions and fixes.

CVE-2026-94173 Medium · 5.4 CWE-639 Sep 30, 2026
WordPress Business Directory plugin <= 6.4.27 - Insecure Direct Object References (IDOR) vulnerability
Contributor Insecure Direct Object References (IDOR) in Business Directory <= 6.4.27 versions.
CVE-2026-84769 Medium · 6.5 CWE-639 Sep 3, 2026
WordPress Business Directory plugin <= 6.4.26 - Insecure Direct Object References (IDOR) vulnerability
Unauthenticated Insecure Direct Object References (IDOR) in Business Directory <= 6.4.26 versions.
CVE-2026-84758 Medium · 6.5 CWE-862 Sep 3, 2026
WordPress Business Directory plugin <= 6.4.26 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Business Directory <= 6.4.26 versions.
CVE-2026-28004 High · 7.1 CWE-79 Aug 13, 2026
WordPress Business Directory plugin <= 6.4.25 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in Business Directory <= 6.4.25 versions.
CVE-2026-61959 Medium · 6.5 CWE-79 Aug 6, 2026
WordPress Business Directory plugin <= 6.4.24 - Cross Site Scripting (XSS) vulnerability
Subscriber Cross Site Scripting (XSS) in Business Directory <= 6.4.24 versions.
CVE-2026-57339 Medium · 6.5 CWE-862 Jun 29, 2026
WordPress Business Directory plugin <= 6.4.23 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Business Directory <= 6.4.23 versions.
CVE-2026-57328 Medium · 6.5 CWE-79 Jun 29, 2026
WordPress Business Directory plugin <= 6.4.22 - Cross Site Scripting (XSS) vulnerability
Subscriber Cross Site Scripting (XSS) in Business Directory <= 6.4.22 versions.
CVE-2026-57326 Medium · 6.1 CWE-79 Jun 29, 2026
WordPress Business Directory plugin <= 6.4.22 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in Business Directory <= 6.4.22 versions.
CVE-2025-64630 Medium · 4.9 CWE-862 Dec 16, 2025
WordPress Business Directory plugin <= 6.4.19 - Broken Access Control vulnerability
Missing Authorization vulnerability in Strategy11 Team Business Directory business-directory-plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Business Directory: from n/a through <= 6.4.19.
CVE-2025-67596 Medium · 4.3 CWE-352 Dec 9, 2025
WordPress Business Directory plugin <= 6.4.19 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery (CSRF) vulnerability in Strategy11 Team Business Directory business-directory-plugin allows Cross Site Request Forgery.This issue affects Business Directory: from n/a through <= 6.4.19.
CVE-2025-64219 Medium · 4.3 CWE-862 Oct 29, 2025
WordPress Business Directory plugin <= 6.4.18 - Broken Access Control vulnerability
Missing Authorization vulnerability in Strategy11 Team Business Directory business-directory-plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Business Directory: from n/a through <= 6.4.18.