Vulnerabilidades en Business Directory Team
8 resultadosAnálisis Vexday
Business Directory Team apresenta 8 vulnerabilidades catalogadas, nenhuma em exploração ativa conhecida nem com severidade crítica, indicando risco baixo no curto prazo. A fraqueza dominante (CWE-352 - Cross-Site Request Forgery) sugere problemas de validação de requisições que demandam remediação, mas a ausência de atividade recente de publicação reforça que não há pressão imediata de risco.
CVE-2021-24248—Business Directory Plugin < 5.11.1 - Authenticated PHP4 Upload to RCEEPSS 1.6%CVE-2021-24249—Business Directory Plugin < 5.11.2 - Arbitrary Listing ExportEPSS 0.7%CVE-2021-24179—Business Directory Plugin < 5.11 - Arbitrary File Upload to RCEEPSS 0.7%CVE-2021-24178—Business Directory Plugin < 5.11.1 - Arbitrary Add/Edit/Delete Form Field to Stored XSSEPSS 0.7%CVE-2021-24250—Business Directory Plugin < 5.11.2 - Authenticated Stored Cross-Site ScriptingEPSS 0.6%CVE-2021-24251—Business Directory Plugin < 5.11.2 - Arbitrary Payment History UpdateEPSS 0.5%CVE-2023-51516MEDIUMWordPress Business Directory Plugin – Easy Listing Directories for WordPress plugin <= 6.3.9 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2023-5803MEDIUMWordPress Business Directory Plugin Plugin <= 6.3.10 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.3%