Skip to content
OpenAdvisories

Vendor

cmsjunkie

6 known vulnerabilities.

Products

WP-BusinessDirectory – Business directory plugin for WordPress 1 JHotelReservation 1 MultipleHotelReservation 1 J-CruisePortal 1 ClassifiedsManager 1 J-BusinessDirectory 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2026-6070

    WP-BusinessDirectory <= 4.0.1 - Unauthenticated Arbitrary File Deletion via Path Traversal via '_filename' Parameter

    The WP-BusinessDirectory plugin for WordPress is vulnerable to Unauthenticated Arbitrary File Deletion in versions up to and including 4.0.1. This is due to insufficient path validation in the remove() method of the JBusinessDirectoryControllerUpload class. T…

    cmsjunkie WP-BusinessDirectory – Business directory plugin for WordPress Web / CMS