Business Directory Plugin – Easy Listing Directories for WordPress

Vulnerabilities 17Slug business-directory-pluginLatest version 6.4.23WordPress.org →

Minimum safe version

6.4.22

Update to 6.4.22 or later to address 17 fixable vulnerabilities

Latest available6.4.23 ✓

N/A

2026-02-17< 6.4.22

Business Directory Plugin <= 6.4.21 - Unauthenticated SQL Injection via payment Parameter

Wordfence CVE

N/A

2026-02-17< 6.4.21

Business Directory Plugin <= 6.4.20 - Missing Authorization to Unauthenticated Arbitrary Listing Modification

Wordfence CVE

Medium 4.9

2025-12-16< 6.4.20

CVE-2025-64630

CVE Wordfence

Medium 4.3

2025-12-09< 6.4.20

CVE-2025-67596

CVE Wordfence

Medium 4.3

2025-10-29< 6.4.19

CVE-2025-64219

CVE Wordfence

Medium 5.3

2025-03-13< 6.4.15

CVE-2024-13887

CVE EUVD Patchstack Wordfence

High 8.0

2024-06-18< 6.4.4

CVE-2023-5527

CVE Wordfence Patchstack

High 7.5

2024-05-22< 6.4.3

CVE-2024-4443

CVE Patchstack Wordfence

Medium 5.4

2024-12-27< 6.3.10

WordPress Business Directory Plugin Plugin <= 6.3.9 is vulnerable to Broken Access Control

Patchstack CVE Wordfence WPScan

Medium 4.3

2023-11-30< 6.3.11

CVE-2023-5803

CVE Patchstack Wordfence WPScan

N/A

2017-08-02< 4.1.14.1

WordPress Business Directory Plugin <= 4.1.14 - Authenticated PHP Object Injection Vulnerability

Patchstack

High 8.8

2021-05-05< 5.11

CVE-2021-24179

CVE Patchstack Wordfence WPScan

High 8.8

2021-05-05< 5.11.1

CVE-2021-24178

CVE Wordfence WPScan

Medium 4.3

2021-05-05< 5.11.2

CVE-2021-24251

CVE Patchstack Wordfence WPScan

Medium 5.4

2021-05-05< 5.11.2

CVE-2021-24250

CVE Patchstack Wordfence WPScan

Medium 6.5

2021-05-05< 5.11.2

CVE-2021-24249

CVE Patchstack Wordfence WPScan

High 7.2

2021-05-05< 5.11.1

CVE-2021-24248

CVE Wordfence WPScan