Description
Subscriber Arbitrary File Upload in WP-BusinessDirectory <= 4.0.0 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| CMSJunkie – WordPress Business Directory Plugins | WP-BusinessDirectory | ≤ 4.0.0 | — |
Critical · 9.9
CVE-2026-39591
EUVD-2026-36969GHSA-w5jv-9w5f-54r3
WordPress WP-BusinessDirectory plugin <= 4.0.0 - Arbitrary File Upload vulnerability
Published Jun 15, 2026 · Updated Jun 16, 2026 · Assigned by Patchstack