Plugin: GeoDirectory – WP Business Directory Plugin and Classified Listings Directory
Versions: <= 2.8.162
CVSS: 7.5/10
Correctif: 2.8.163

17 juin 2026

Lire

MoyenneCVSS 5.3

CVE-2026-42671

Défaut de contrôle d'accès dans GeoDirectory – WP Business Directory Plugin and Classified Listings Directory (<= 2.8.157)

Plugin: GeoDirectory – WP Business Directory Plugin and Classified Listings Directory
Versions: <= 2.8.157
CVSS: 5.3/10
Correctif: 2.8.158

Injection SQL, non authentifié, dans GeoDirectory – WP Business Directory Plugin and Classified Listings Directory (<= 2.8.152)

Plugin: GeoDirectory – WP Business Directory Plugin and Classified Listings Directory
Versions: <= 2.8.152
CVSS: 7.5/10
Correctif: 2.8.154

Téléversement de fichier arbitraire, authentifié (Abonné+), dans WP-BusinessDirectory – Business directory plugin for WordPress (<= 4.0.0)

Plugin: WP-BusinessDirectory – Business directory plugin for WordPress
Versions: <= 4.0.0
CVSS: 8.8/10
Correctif: 4.0.1

Défaut de contrôle d'accès dans aDirectory – WP Business Directory Plugin and Classified Ads Listings Directory (<= 3.0.3)

Plugin: aDirectory – WP Business Directory Plugin and Classified Ads Listings Directory
Versions: <= 3.0.3
CVSS: 4.3/10
Correctif: 3.0.4

CSRF (Cross-Site Request Forgery) dans GeoDirectory – WP Business Directory Plugin and Classified Listings Directory (<= 2.8.149)

Plugin: GeoDirectory – WP Business Directory Plugin and Classified Listings Directory
Versions: <= 2.8.149
CVSS: 4.3/10
Correctif: 2.8.150

XSS réfléchi dans WP-BusinessDirectory – Business directory plugin for WordPress (<= 3.1.5)

Plugin: WP-BusinessDirectory – Business directory plugin for WordPress
Versions: <= 3.1.5
CVSS: 6.1/10
Correctif: Aucun

Défaut de contrôle d'accès, authentifié (Auteur+), dans GeoDirectory – WP Business Directory Plugin and Classified Listings Directory (<= 2.8.139)

Plugin: GeoDirectory – WP Business Directory Plugin and Classified Listings Directory
Versions: <= 2.8.139
CVSS: 4.3/10
Correctif: 2.8.140

Injection SQL, non authentifié, dans WP-BusinessDirectory – Business directory plugin for WordPress (<= 3.1.4)

Plugin: WP-BusinessDirectory – Business directory plugin for WordPress
Versions: <= 3.1.4
CVSS: 7.5/10
Correctif: 3.1.5

XSS stocké, authentifié (Contributeur+), dans GeoDirectory – WP Business Directory Plugin and Classified Listings Directory (<= 2.8.119)

Plugin: GeoDirectory – WP Business Directory Plugin and Classified Listings Directory
Versions: <= 2.8.119
CVSS: 6.4/10
Correctif: 2.8.120

XSS réfléchi dans WP-BusinessDirectory – Business directory plugin for WordPress (<= 3.1.2)

Plugin: WP-BusinessDirectory – Business directory plugin for WordPress
Versions: <= 3.1.2
CVSS: 6.1/10
Correctif: 3.1.3

10 avr. 2025

Lire

1 – 12 sur 27 articles