WordPress Plugin: Business Directory Plugin – Easy Listing Directories SQL Injection Vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be added t...

CVE-2026-2576: Improper Neutralization of Special Elements used in an SQL Command

The Business Directory Plugin – Easy Listing Directories for WordPress plugin for WordPress is vulnerable to time-based SQL Injection via the 'payment' parameter in all versions up to, and including, 6.4.2 due to insufficient escaping on the user supplied parameter and lack of sufficient...

EUVD-2007-0614

Malware in sbrugna...

EUVD-2002-0776

Malware in sbrugna...

EUVD-2023-58086

Malicious code in bioql PyPI...

CVE-2024-13887: Authorization Bypass Through User-Controlled Key

The Business Directory Plugin – Easy Listing Directories for WordPress plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 6.4.14 via the 'ajaxlistingsubmitimageupload' function due to missing validation on a user controlled key. This makes...

CVE-2024-4443: Improper Neutralization of Special Elements used in an SQL Command

The Business Directory Plugin – Easy Listing Directories for WordPress plugin for WordPress is vulnerable to time-based SQL Injection via the ‘listingfields’ parameter in all versions up to, and including, 6.4.2 due to insufficient escaping on the user supplied parameter and lack of sufficient...

CVE-2023-5803

Cross-Site Request Forgery CSRF vulnerability in Business Directory Team Business Directory Plugin – Easy Listing Directories for WordPress allows Cross-Site Request Forgery.This issue affects Business Directory Plugin – Easy Listing Directories for WordPress: from n/a through 6.3.10...

CVE-2023-5803

Cross-Site Request Forgery CSRF vulnerability in Business Directory Team Business Directory Plugin – Easy Listing Directories for WordPress allows Cross-Site Request Forgery.This issue affects Business Directory Plugin – Easy Listing Directories for WordPress: from n/a through 6.3.10...

CVE-2023-5803

CVE-2023-5803 affects the WordPress plugin Business Directory Plugin – Easy Listing Directories for WordPress (versions up to 6.3.10). The issue is a Cross-Site Request Forgery (CSRF) due to missing CSRF checks in some locations. Patchstack notes the fix is in version 6.3.11; other sources corrob...

CVE-2023-5803: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Business Directory Team Business Directory Plugin – Easy Listing Directories for WordPress allows Cross-Site Request Forgery.This issue affects Business Directory Plugin – Easy Listing Directories for WordPress: from n/a through 6.3.10...

CVE-2022-25358

A ..%2F path traversal vulnerability exists in the path handler of awful-salmonella-tar before 0.0.4. Attackers can only list directories not read files. This occurs because the safe-path? Scheme predicate is not used for directories...

CVE-2021-24248

CVE-2021-24248 affects the WordPress plugin Business Directory Plugin – Easy Listing Directories (pre-5.11.1). Affected component is the import mechanism, which did not properly validate imported files: a blacklist approach allowed an archive containing a .php4 file to be uploaded, enabling an au...

CVE-2021-24178: Cross-Site Request Forgery (CSRF)

The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.1 suffered from Cross-Site Request Forgery issues, allowing an attacker to make a logged in administrator add, edit or delete form fields, which could also lead to Stored Cross-Site Scripting issue...

CVE-2021-24251: Cross-Site Request Forgery (CSRF)

The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.2 suffered from a Cross-Site Request Forgery issue, allowing an attacker to make a logged in administrator update arbitrary payment history, such as change their status from pending to completed to...

CVE-2021-24248: Unrestricted Upload of File with Dangerous Type

The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.1 did not properly check for imported files, forbidding certain extension via a blacklist approach, allowing administrator to import an archive with a .php4 inside for example, leading to RCE...

CVE-2021-24250: Improper Neutralization of Input During Web Page Generation

The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.2 suffered from lack of sanitisation in the label of the Form Fields, leading to Authenticated Stored Cross-Site Scripting issues across various pages of the plugin...

PT-2021-15791

Name of the Vulnerable Software and Affected Versions The Business Directory Plugin – Easy Listing Directories for WordPress versions prior to 5.11.2 Description The issue allows an attacker to perform a Cross-Site Request Forgery attack, enabling them to make a logged-in administrator export...

CVE-2021-24179: Cross-Site Request Forgery (CSRF)

The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11 suffered from a Cross-Site Request Forgery issue, allowing an attacker to make a logged in administrator import files. As the plugin also did not validate uploaded files, it could lead to RCE...

PT-2019-15717

Name of the Vulnerable Software and Affected Versions Systematic IRIS WebForms version 5.4 Description The issue allows for directory traversal by manipulating variables that reference files with ../ and variations, making it possible to list all the directories and check if a particular file...