Business Directory Plugin – Easy Listing Directories for WordPress, 03deb7a1bbdcb602268798c76ed73ded25caa143
- CVE, Research URL
- Home page URL
-
Security reports for Business Directory Plugin – Easy Listing Directories for WordPress
- Published on
- Aug 02, 2017
- Research Description
- Business Directory Plugin – Easy Listing Directories for WordPress [business-directory-plugin] < 4.1.14.1 WordPress Business Directory Plugin <= 4.1.14 - Authenticated PHP Object Injection Vulnerability WordPress Business Directory plugin the function ajax_csv_export() is available to anyone logged in to WordPress which unserialize the value of the GET or POST input, which can cause PHP object injection. Update the plugin.
- Affected versions
-
max 4.1.14.1.
- Status
-
vulnerable