Gwendydd vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Gwendydd products: 1 record(s), with severity, exploitation and fixes.

Chamber Dashboard Business Directory 1

Exploited only (KEV) →

CVE-2025-13414 Medium · 5.3 CWE-862 Nov 25, 2025

Chamber Dashboard Business Directory <= 3.3.11 - Missing Authorization to Unauthenticated Business Information Export

The Chamber Dashboard Business Directory plugin for WordPress is vulnerable to unauthorized data export due to a missing capability check on the cdash_watch_for_export() function in all versions up to, and including, 3.3.11. This makes it possible for unauthenticated attackers to export business directory information, including sensitive business details.