Aller au contenu
Se connecter
5.3 Moyenne

CVE-2026-86789 The Connections Business Directory WordPress plugin through 10.4.67 does not apply its visibility and…

Description

The Connections Business Directory WordPress plugin through 10.4.67 does not apply its visibility and moderation-status restrictions on certain REST API read endpoints, allowing unauthenticated attackers to retrieve directory entries that are marked private or unlisted, or that are still pending moderation, including entry names, organizations, biographies, internal notes and street addresses. The Connections Business Directory WordPress plugin through 10.4.67 has been closed on WordPress.org and no fixed version is available, so site owners should remove it or restrict unauthenticated access to its REST API routes.

Produits et versions touchés

Produit Versions touchées Corrigé en
Connections Business Directory 10.4 premières → 10.4.67 Pas de correctif indiqué

Autres CVE de Connections Business Directory

Les 3 CVE de Connections Business Directory →
CVE-2021-24794 The Connections Business Directory WordPress plugin before 10.4.3 does not escape the Address settings when creating… Non notée CVE-2020-36503 The Connections Business Directory WordPress plugin before 9.7 does not validate or sanitise some connections' fields,… Non notée
Suivre cette CVE