CVE-2021-24249

Summary

The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.2 suffered from a Cross-Site Request Forgery issue, allowing an attacker to make a logged in administrator export files, which could then be downloaded by the attacker to get access to PII, such as email, home addresses etc

Affected Software

VendorProductVersion RangeStatus
Business Directory TeamBusiness Directory Plugin – Easy Listing Directories for WordPress5.11.2 < 5.11.2affected

Weaknesses

  • CWE-352: CWE-352 Cross-Site Request Forgery (CSRF)

ADP Enrichment

CVE Program Container

Additional References

References