WordPress plugin
Business Directory Plugin – Easy Listing & Member Directories for WordPress security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 25 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical1
- High8
- Medium16
- Low0
All Business Directory Plugin – Easy Listing & Member Directories for WordPress vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High7.2 | Unauthenticated Stored Cross-Site Scripting ≤6.4.25Update to 6.4.26 | CVE-2026-28004 | |
| High7.2 | Unauthenticated Stored Cross-Site Scripting ≤6.4.22Update to 6.4.23 | CVE-2026-57326 | |
| High7.5 | Unauthenticated SQL Injection via payment Parameter ≤6.4.21Update to 6.4.22 | CVE-2026-2576 | |
| High7.4 | Authenticated (Author+) CSV Injection ≤6.4.3Update to 6.4.4 | CVE-2023-5527 | |
| Critical9.8 | Unauthenticated SQL Injection via listingfields Parameter ≤6.4.2Update to 6.4.3 | CVE-2024-4443 | |
| High8.8 | Cross-Site Request Forgery to Arbitrary Listing Export ≤5.11.1Update to 5.11.2 | CVE-2021-24249 | |
| High7.2 | Authenticated PHP4 Upload ≤5.11Update to 5.11.1 | CVE-2021-24248 | |
| High8.8 | Cross-Site Request Forgery to Arbitrary File Upload ≤5.10.1Update to 5.11 | CVE-2021-24179 | |
| High8.8 | Cross-Site Request Forgery ≤5.11Update to 5.11.1 | CVE-2021-24178 |
- High7.2Unauthenticated Stored Cross-Site Scripting
≤6.4.25Update to 6.4.26
- High7.2Unauthenticated Stored Cross-Site Scripting
≤6.4.22Update to 6.4.23
- High7.5Unauthenticated SQL Injection via payment Parameter
≤6.4.21Update to 6.4.22
- High7.4Authenticated (Author+) CSV Injection
≤6.4.3Update to 6.4.4
- Critical9.8Unauthenticated SQL Injection via listingfields Parameter
≤6.4.2Update to 6.4.3
- High8.8Cross-Site Request Forgery to Arbitrary Listing Export
≤5.11.1Update to 5.11.2
- High7.2Authenticated PHP4 Upload
≤5.11Update to 5.11.1
- High8.8Cross-Site Request Forgery to Arbitrary File Upload
≤5.10.1Update to 5.11
- High8.8Cross-Site Request Forgery
≤5.11Update to 5.11.1
Business Directory Plugin – Easy Listing & Member Directories for WordPress: common questions
Does Business Directory Plugin – Easy Listing & Member Directories for WordPress have known vulnerabilities?
Yes. VulnCrest Radar lists 25 known vulnerabilities in Business Directory Plugin – Easy Listing & Member Directories for WordPress: 1 critical, 8 high, 16 medium. None are known to affect version null.
How do I check which version of Business Directory Plugin – Easy Listing & Member Directories for WordPress I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Business Directory Plugin – Easy Listing & Member Directories for WordPress vulnerability?
CVE-2026-62097, published Sep 30, 2026: Business Directory Plugin – Easy Listing & Member Directories for WordPress <= 6.4.27 - Authenticated (Administrator+) SQL Injection. Severity: Medium (CVSS 4.9).
Is any Business Directory Plugin – Easy Listing & Member Directories for WordPress vulnerability listed in CISA KEV?
No. None of the known Business Directory Plugin – Easy Listing & Member Directories for WordPress vulnerabilities is currently listed in the CISA KEV catalog.