VulnCrest
Search
Create account
Report an incident
Radar sectionsPlugins & themes
Check my site

WordPress plugin

Business Directory Plugin – Easy Listing & Member Directories for WordPress security & vulnerabilities

business-directory-plugin— active installsLast vulnerability Sep 30, 2026

No known unpatched vulnerabilities in the latest version

All 25 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.

Watch plugin
25Known vulnerabilities
  • Critical1
  • High8
  • Medium16
  • Low0
Vulnerabilities per year
2021: 6 vulnerabilities6212023: 2 vulnerabilities2232024: 2 vulnerabilities2242025: 4 vulnerabilities4252026: 11 vulnerabilities1126

All Business Directory Plugin – Easy Listing & Member Directories for WordPress vulnerabilities

Business Directory Plugin – Easy Listing & Member Directories for WordPress vulnerabilities
SeverityVulnerabilityCVEPublished
Medium4.9Authenticated (Administrator+) SQL Injection
≤6.4.27Update to 6.4.28
CVE-2026-62097
Medium4.3Authenticated (Contributor+) Insecure Direct Object Reference
≤6.4.27Update to 6.4.28
CVE-2026-94173
Medium5.3Missing Authorization
≤6.4.26Update to 6.4.27
CVE-2026-84758
Medium5.3Unauthenticated Insecure Direct Object Reference
≤6.4.26Update to 6.4.27
CVE-2026-84769
High7.2Unauthenticated Stored Cross-Site Scripting
≤6.4.25Update to 6.4.26
CVE-2026-28004
Medium6.4Authenticated (Subscriber+) Stored Cross-Site Scripting
≤6.4.24Update to 6.4.25
CVE-2026-61959
High7.2Unauthenticated Stored Cross-Site Scripting
≤6.4.22Update to 6.4.23
CVE-2026-57326
Medium5.3Missing Authorization
≤6.4.23Update to 6.4.24
CVE-2026-57339
Medium6.4Authenticated (Subscriber+) Stored Cross-Site Scripting
≤6.4.22Update to 6.4.23
CVE-2026-57328
Medium5.3Missing Authorization to Unauthenticated Arbitrary Listing Modification
≤6.4.20Update to 6.4.21
CVE-2026-1656
High7.5Unauthenticated SQL Injection via payment Parameter
≤6.4.21Update to 6.4.22
CVE-2026-2576
Medium4.3Missing Authorization
≤6.4.19Update to 6.4.20
CVE-2025-64630
Medium4.3Cross-Site Request Forgery
≤6.4.19Update to 6.4.20
CVE-2025-67596
Medium4.3Missing Authorization
≤6.4.18Update to 6.4.19
CVE-2025-64219
Medium5.3Easy Listing Directories for WordPress <= 6.4.14 - Insecure Direct Object Reference to Listing Arbitrary Image Addition
≤6.4.14Update to 6.4.15
CVE-2024-13887
High7.4Authenticated (Author+) CSV Injection
≤6.4.3Update to 6.4.4
CVE-2023-5527
Critical9.8Unauthenticated SQL Injection via listingfields Parameter
≤6.4.2Update to 6.4.3
CVE-2024-4443
Medium5.4Missing Authorization via dispatch
≤6.3.9Update to 6.3.10
CVE-2023-51516
Medium4.3Cross-Site Request Forgery
≤6.3.10Update to 6.3.11
CVE-2023-5803
Medium4.3Cross-Site Request Forgery to Arbitrary Payment History Update
≤5.11.1Update to 5.11.2
CVE-2021-24251
High8.8Cross-Site Request Forgery to Arbitrary Listing Export
≤5.11.1Update to 5.11.2
CVE-2021-24249
Medium5.4Authenticated Stored Cross-Site Scripting
≤5.11.1Update to 5.11.2
CVE-2021-24250
High7.2Authenticated PHP4 Upload
≤5.11Update to 5.11.1
CVE-2021-24248
High8.8Cross-Site Request Forgery to Arbitrary File Upload
≤5.10.1Update to 5.11
CVE-2021-24179
High8.8Cross-Site Request Forgery
≤5.11Update to 5.11.1
CVE-2021-24178

Business Directory Plugin – Easy Listing & Member Directories for WordPress: common questions

Does Business Directory Plugin – Easy Listing & Member Directories for WordPress have known vulnerabilities?

Yes. VulnCrest Radar lists 25 known vulnerabilities in Business Directory Plugin – Easy Listing & Member Directories for WordPress: 1 critical, 8 high, 16 medium. None are known to affect version null.

How do I check which version of Business Directory Plugin – Easy Listing & Member Directories for WordPress I run?

In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.

What is the most recent Business Directory Plugin – Easy Listing & Member Directories for WordPress vulnerability?

CVE-2026-62097, published Sep 30, 2026: Business Directory Plugin – Easy Listing & Member Directories for WordPress <= 6.4.27 - Authenticated (Administrator+) SQL Injection. Severity: Medium (CVSS 4.9).

Is any Business Directory Plugin – Easy Listing & Member Directories for WordPress vulnerability listed in CISA KEV?

No. None of the known Business Directory Plugin – Easy Listing & Member Directories for WordPress vulnerabilities is currently listed in the CISA KEV catalog.

Search VulnCrest Radar

Jump to

Are you sure?