cleantalk
Vulnerabilities and Security Researches

WP-BusinessDirectory – Business directory plugin for WordPress, CVE-2025-24759

CVE, Research URL

CVE-2025-24759

Published on
Jul 16, 2025
Research Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CMSJunkie - WordPress Business Directory Plugins WP-BusinessDirectory allows Blind SQL Injection. This issue affects WP-BusinessDirectory: from n/a through 3.1.3.
Affected versions
Min -, max 3.1.3.
Status
vulnerable