Business Directory Plugin – Easy Listing Directories for WordPress vulnerabilities

Product

Business Directory Plugin – Easy Listing Directories for WordPress

by strategy11team · last CVE Feb 18, 2026

CVEs

On KEV

8.0

Max CVSS

New 30D

Severity mix

Critical 0High 3Medium 2Low 0

Severity

Exploitation

Watch

Add Business Directory Plugin – Easy Listing Directories for WordPress to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2023-5527	8.0	0%	Jun 18	Business Directory Plugin <= 6.4.3 - Authenticated (Author+) CSV Injection Affected: through 6.4.3
CVE-2026-2576	7.5	0%	Feb 18	Business Directory Plugin <= 6.4.21 - Unauthenticated SQL Injection via payment Parameter Affected: through 6.4.21
CVE-2024-4443	7.5	10%	May 22	Business Directory Plugin – Easy Listing Directories for WordPress <= 6.4.2 - Unauthenticated SQL Injection via listingfields Parameter Affected: through 6.4.2
CVE-2026-1656	5.3	0%	Feb 18	Business Directory Plugin <= 6.4.20 - Missing Authorization to Unauthenticated Arbitrary Listing Modification Affected: through 6.4.20
CVE-2024-13887	5.3	0%	Mar 13	Business Directory Plugin - Easy Listing Directories for WordPress <= 6.4.14 - Insecure Direct Object Reference to Listing Arbitrary Image Addition Affected: through 6.4.14