Cmsjunkie - WordPress Business Directory Plugins Wp-Businessdirectory
5 CVEs affecting Cmsjunkie - WordPress Business Directory Plugins Wp-Businessdirectory. Latest disclosed: 2026-06-15. Critical: 2, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-39591 | Critical | 9.9 | 2026-06-15 | Subscriber Arbitrary File Upload in WP-BusinessDirectory <= 4.0.0 versions. |
CVE-2025-24759 | Critical | 9.3 | 2025-07-16 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CMSJunkie - WordPress Business Directory Plugins WP-Busin… |
CVE-2025-32629 | High | 8.6 | 2025-04-11 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in CMSJunkie - WordPress Business Directory Plugins WP-BusinessDir… |
CVE-2025-68887 | High | 7.1 | 2026-01-08 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CMSJunkie - WordPress Business Directory Plugins WP-Busin… |
CVE-2025-32630 | High | 7.1 | 2025-04-17 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CMSJunkie - WordPress Business Directory Plugins WP-Busin… |