https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2023-5527.htmlhttps://patchthecve.com/cve/CVE-2023-5527.htmlWed, 17 Jun 2026 06:48:46 +0000HIGH 7.4: The Business Directory Plugin plugin for WordPress is vulnerable to CSV Injection in versions up to, and including, 6.4.3 via the class-csv-exporter.php file. This allows authenticated attackers, with author-level permissions and above, to embed untrusted input into CSV files exported by administrathttps://patchthecve.com/cve/CVE-2023-51516.htmlhttps://patchthecve.com/cve/CVE-2023-51516.htmlWed, 17 Jun 2026 06:41:07 +0000MEDIUM 5.4: Missing Authorization vulnerability in Business Directory Team Business Directory Plugin.This issue affects Business Directory Plugin: from n/a through 6.3.9.https://patchthecve.com/cve/CVE-2024-4443.htmlhttps://patchthecve.com/cve/CVE-2024-4443.htmlWed, 17 Jun 2026 08:01:53 +0000CRITICAL 9.8: The Business Directory Plugin – Easy Listing Directories for WordPress plugin for WordPress is vulnerable to time-based SQL Injection via the ‘listingfields’ parameter in all versions up to, and including, 6.4.2 due to insufficient escaping on the user supplied parameter and lack of sufficient prepahttps://patchthecve.com/cve/CVE-2023-5803.htmlhttps://patchthecve.com/cve/CVE-2023-5803.htmlWed, 17 Jun 2026 06:49:24 +0000MEDIUM 4.3: Cross-Site Request Forgery (CSRF) vulnerability in Business Directory Team Business Directory Plugin – Easy Listing Directories for WordPress allows Cross-Site Request Forgery.This issue affects Business Directory Plugin – Easy Listing Directories for WordPress: from n/a through 6.3.10.