Vulnerabilidades de CMSJunkie - WordPress Business Directory Plugins

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de CMSJunkie - WordPress Business Directory Plugins: 2 registro(s), com severidade, exploração e correções.

WP-BusinessDirectory 2

Somente exploradas (KEV) →

CVE-2026-39591 Crítica · 9.9 CWE-434 15/06/2026

WordPress WP-BusinessDirectory plugin <= 4.0.0 - Arbitrary File Upload vulnerability

Subscriber Arbitrary File Upload in WP-BusinessDirectory <= 4.0.0 versions.

CVE-2025-68887 Alta · 7.1 CWE-79 08/01/2026

WordPress WP-BusinessDirectory plugin <= 4.0.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CMSJunkie - WordPress Business Directory Plugins WP-BusinessDirectory wp-businessdirectory allows Reflected XSS.This issue affects WP-BusinessDirectory: from n/a through <= 4.0.1.