CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
The Business Directory Plugin for WordPress is vulnerable to authorization bypass due to a missing authorization check in all versions up to, and including, 6.4.20. This makes it possible for unauthenticated attackers to modify arbitrary listings, including changing titles, content, and email addresses, by directly referencing the listing ID in crafted requests to the wpbdp_ajax AJAX action.
Explanation of Vulnerability in Simple Terms
The Business Directory Plugin for WordPress versions 6.4.20 and earlier does not properly check user permissions before allowing certain actions. An unauthenticated attacker can modify data on the site without authorization. The vulnerability requires no user interaction and can be exploited remotely over the network.
What an attacker can do
Modify site data without logging in or having permission to do so.
Potential impact on your site
Unauthorized changes to business directory listings and related data without your knowledge or consent.
Conditions required to exploit
Network access to the WordPress site; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
