CVE-2021-24249

CVE-2021-24249: Business Directory Plugin < 5.11.2 - Arbitrary Listing Export

Vendor Business Directory Team
Product Business Directory Plugin – Easy Listing Directories for WordPress
Weakness CWE-352 · CSRF
Published May 5, 2021
Last update August 3, 2024

CVSS base score

What the vulnerability does

01Description

The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.2 suffered from a Cross-Site Request Forgery issue, allowing an attacker to make a logged in administrator export files, which could then be downloaded by the attacker to get access to PII, such as email, home addresses etc

Key dates

02Disclosure timeline

May 5, 2021 CVE published
August 3, 2024 Record updated