Medium · 5.4 CVE-2025-23917 EUVD-2025-3532GHSA-m99x-44qx-5f98

WordPress Chamber Dashboard Business Directory Plugin <= 3.3.8 - Broken Access Control vulnerability

Published Jan 16, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Chandrika Guntur, Morgan Kay Product: Chamber Dashboard Business Directory

Description

Missing Authorization vulnerability in Chandrika Guntur, Morgan Kay Chamber Dashboard Business Directory allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Chamber Dashboard Business Directory: from n/a through 3.3.8.

Affected products

Vendor	Product	Affected	Fixed
Chandrika Guntur, Morgan Kay	Chamber Dashboard Business Directory	≤ 3.3.8	—

References

https://patchstack.com/database/wordpress/plugin/chamber-dashboard-business-directory/vulnerability/wordpress-chamber-dashboard-business-directory-plugin-3-3-8-broken-access-control-vulnerability?_s_id=cve vdb-entry