VulnCheck KEV: CVE-2024-4443

The Business Directory Plugin – Easy Listing Directories for WordPress plugin for WordPress is vulnerable to time-based SQL Injection via the ‘listingfields’ parameter in all versions up to, and including, 6.4.2 due to insufficient escaping on the user supplied parameter and lack of sufficient...

WordPress Business Directory plugin <= 6.4.2 - Unauthenticated SQL Injection via listingfields Parameter vulnerability

Unauthenticated SQL Injection via listingfields Parameter vulnerability discovered by Krzysztof Zając in WordPress Plugin Business Directory versions = 6.4.2...