CVE Intelligence

Vulnerabilidades do CMSJunkie - WordPress Business Directory Plugins WP-BusinessDirectory

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam CMSJunkie - WordPress Business Directory Plugins WP-BusinessDirectory: 2 registro(s), com versões afetadas e correções.

CVE-2026-39591 Crítica · 9.9 CWE-434 15/06/2026
WordPress WP-BusinessDirectory plugin <= 4.0.0 - Arbitrary File Upload vulnerability
Subscriber Arbitrary File Upload in WP-BusinessDirectory <= 4.0.0 versions.
CVE-2025-68887 Alta · 7.1 CWE-79 08/01/2026
WordPress WP-BusinessDirectory plugin <= 4.0.1 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CMSJunkie - WordPress Business Directory Plugins WP-BusinessDirectory wp-businessdirectory allows Reflected XSS.This issue affects WP-BusinessDirectory: from n/a through <= 4.0.1.