Description
The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.1 did not properly check for imported files, forbidding certain extension via a blacklist approach, allowing administrator to import an archive with a .php4 inside for example, leading to RCE
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Business Directory Team | Business Directory Plugin – Easy Listing Directories for WordPress | 5.11.1 – < 5.11.1 | 5.11.1 |