Lucene search
+L

5 matches found

Kitploit
Kitploit
•added 2026/09/29 12:34 a.m.•17 views

CVE-2024-4443-Poc

CVE-2024-4443-Poc CVE-2024-4443 Business Directory Plugin – Easy Listing Directories for WordPress execute \business-directory-plugin\includes\helpers\class-listing-search.php:88 WPBDPListingSearch-traversetree \business-directory-plugin\includes\helpers\class-listing-search.php:185...

9.8CVSS6.1AI score0.10355EPSS
SaveExploits1
VulnCheck KEV
VulnCheck KEV
•added 2026/01/18 12:00 a.m.•11 views

VulnCheck KEV: CVE-2024-4443

The Business Directory Plugin – Easy Listing Directories for WordPress plugin for WordPress is vulnerable to time-based SQL Injection via the ‘listingfields’ parameter in all versions up to, and including, 6.4.2 due to insufficient escaping on the user supplied parameter and lack of sufficient...

9.8CVSS5.7AI score0.10355EPSS
SaveIn wildExploits1References134
OSV
OSV
•added 2024/05/22 6:15 a.m.•17 views

CVE-2024-4443

The Business Directory Plugin – Easy Listing Directories for WordPress plugin for WordPress is vulnerable to time-based SQL Injection via the ‘listingfields’ parameter in all versions up to, and including, 6.4.2 due to insufficient escaping on the user supplied parameter and lack of sufficient...

7.5CVSS5.9AI score0.10355EPSS
SaveExploits1References3
Patchstack
Patchstack
•added 2024/05/22 1:07 a.m.•23 views

WordPress Business Directory plugin <= 6.4.2 - Unauthenticated SQL Injection via listingfields Parameter vulnerability

Unauthenticated SQL Injection via listingfields Parameter vulnerability discovered by Krzysztof Zając in WordPress Plugin Business Directory versions = 6.4.2...

9.8CVSS8.1AI score0.10355EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/22 12:00 a.m.•1 views

CVE-2024-4443: Improper Neutralization of Special Elements used in an SQL Command

The Business Directory Plugin – Easy Listing Directories for WordPress plugin for WordPress is vulnerable to time-based SQL Injection via the ‘listingfields’ parameter in all versions up to, and including, 6.4.2 due to insufficient escaping on the user supplied parameter and lack of sufficient...

9.8CVSS5.7AI score0.10355EPSS
SaveExploits1References1
Rows per page
Query Builder