cleantalk
Vulnerabilities and Security Researches

Business Directory Plugin – Easy Listing Directories for WordPress, CVE-2026-28004

CVE, Research URL

CVE-2026-28004

Published on
Aug 13, 2026
Research Description
Unauthenticated Cross Site Scripting (XSS) in Business Directory <= 6.4.25 versions.
Affected versions
max 6.4.26.
Status
vulnerable