CVE-2026-86789: Exposure of Sensitive Information to an Unauthorized Actor

The Connections Business Directory WordPress plugin through 10.4.67 does not apply its visibility and moderation-status restrictions on certain REST API read endpoints, allowing unauthenticated attackers to retrieve directory entries that are marked private or unlisted, or that are still pending...

EUVD-2026-36969

Subscriber Arbitrary File Upload in WP-BusinessDirectory = 4.0.0 versions...

PT-2021-16223

Name of the Vulnerable Software and Affected Versions GeoDirectory Business Directory WordPress plugin versions prior to 2.1.1.3 Description The issue concerns Authenticated Stored Cross-Site Scripting XSS. There is no information provided about the estimated number of potentially affected device...

PT-2021-12071

Name of the Vulnerable Software and Affected Versions: Connections Business Directory WordPress plugin versions prior to 9.7 Description: The issue is related to the Connections Business Directory WordPress plugin, which does not validate or sanitise some connections' fields. This could lead to a...