PT-2025-11139

Name of the Vulnerable Software and Affected Versions: The Business Directory Plugin – Easy Listing Directories for WordPress versions prior to 6.4.15 Description: The issue is related to Insecure Direct Object Reference. It affects the ajax listing submit image upload function due to missing...

CVE-2021-24250: Improper Neutralization of Input During Web Page Generation

The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.2 suffered from lack of sanitisation in the label of the Form Fields, leading to Authenticated Stored Cross-Site Scripting issues across various pages of the plugin...

CVE-2021-24249: Cross-Site Request Forgery (CSRF)

The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.2 suffered from a Cross-Site Request Forgery issue, allowing an attacker to make a logged in administrator export files, which could then be downloaded by the attacker to get access to PII, such as...

PT-2021-15793

Name of the Vulnerable Software and Affected Versions The Business Directory Plugin – Easy Listing Directories for WordPress versions prior to 5.11.2 Description The issue allows an attacker to perform a Cross-Site Request Forgery, enabling them to make a logged-in administrator update arbitrary...

PT-2021-15725

Name of the Vulnerable Software and Affected Versions: The Business Directory Plugin – Easy Listing Directories for WordPress versions prior to 5.11 Description: The issue allows an attacker to make a logged-in administrator import files due to a Cross-Site Request Forgery problem. Additionally,...

PT-2021-15724

Name of the Vulnerable Software and Affected Versions: The Business Directory Plugin – Easy Listing Directories for WordPress versions prior to 5.11.1 Description: The issue allows an attacker to perform Cross-Site Request Forgery, enabling them to make a logged-in administrator add, edit, or...

CVE-2021-24179: Cross-Site Request Forgery (CSRF)

The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11 suffered from a Cross-Site Request Forgery issue, allowing an attacker to make a logged in administrator import files. As the plugin also did not validate uploaded files, it could lead to RCE...

CVE-2021-24178: Cross-Site Request Forgery (CSRF)

The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.1 suffered from Cross-Site Request Forgery issues, allowing an attacker to make a logged in administrator add, edit or delete form fields, which could also lead to Stored Cross-Site Scripting issue...

PT-2021-15792

Name of the Vulnerable Software and Affected Versions The Business Directory Plugin – Easy Listing Directories for WordPress versions prior to 5.11.2 Description The issue is related to a lack of sanitisation in the label of the Form Fields, leading to Authenticated Stored Cross-Site Scripting...

CVE-2021-24251: Cross-Site Request Forgery (CSRF)

The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.2 suffered from a Cross-Site Request Forgery issue, allowing an attacker to make a logged in administrator update arbitrary payment history, such as change their status from pending to completed to...

CVE-2021-24248: Unrestricted Upload of File with Dangerous Type

The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.1 did not properly check for imported files, forbidding certain extension via a blacklist approach, allowing administrator to import an archive with a .php4 inside for example, leading to RCE...

PT-2021-15791

Name of the Vulnerable Software and Affected Versions The Business Directory Plugin – Easy Listing Directories for WordPress versions prior to 5.11.2 Description The issue allows an attacker to perform a Cross-Site Request Forgery attack, enabling them to make a logged-in administrator export...