cleantalk
Vulnerabilities and Security Researches

WP-BusinessDirectory – Business directory plugin for WordPress, CVE-2025-68887

CVE, Research URL

CVE-2025-68887

Published on
Jan 08, 2026
Research Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CMSJunkie - WordPress Business Directory Plugins WP-BusinessDirectory wp-businessdirectory allows Reflected XSS.This issue affects WP-BusinessDirectory: from n/a through <= 3.1.5.
Affected versions
max 3.1.5.
Status
vulnerable