CVE-2021-24249
Business Directory Plugin < 5.11.2 - Arbitrary Listing Export
- State
- Published
- Severity
- Not scored
- Published
- May 5, 2021
- Updated
- Aug 3, 2024
- Reserved
- Jan 14, 2021
Description
The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.2 suffered from a Cross-Site Request Forgery issue, allowing an attacker to make a logged in administrator export files, which could then be downloaded by the attacker to get access to PII, such as email, home addresses etc
Scores
The record has no CVSS score.
Weaknesses
- CWE-352 Cross-Site Request Forgery (CSRF)
Affected Products
| Product | Versions |
|---|---|
Business Directory Plugin – Easy Listing Directories for WordPressBusiness Directory Team |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.