business-directory-plugin vulnerabilities
CVEs whose affected-version data names the business-directory-plugin package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-62097High· 7.6WordPress Business Directory plugin <= 6.4.27 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPTasty Business Directory business-directory-plugin allows Blind SQL Injection.This issue affects Business Directory: from n/a through…
▾ TwilightWPTasty · business-directory-pluginvia CVEORG
CVE-2026-94173Medium· 5.4Contributor Insecure Direct Object References (IDOR) in Business Directory <= 6.4.27 versions.
Contributor Insecure Direct Object References (IDOR) in Business Directory <= 6.4.27 versions.
▾ SunlitStrategy11 Team · business-directory-pluginvia NVD