WP Vulnerability WatchVulnerability data as of September 7, 2026

Known vulnerabilities in Business Directory Plugin – Easy Listing Directories for WordPress

The easy Business Directory Plugin for WordPress. Build an easy team directory, member directory, staff directory, church directory, and more.

15Reported vulnerabilities
8.8Highest CVSS score
6.4.26Latest version
10,000+Active installs

What to do now

Update Business Directory Plugin – Easy Listing Directories for WordPress to 6.4.26 or later. 15 of these have a fixed version available. Updating resolves them.

Plugin last updated: July 29, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVESeverityExploit probability
next 30 days
Affected versionsFixed inPublished
CVE-2024-4443 High 7.5 10.4% Before 6.4.3 6.4.3 May 22, 2024
CVE-2023-5803 High 8.8 0.3% 6.3.10 and earlier 6.3.11 November 30, 2023
CVE-2023-5527 High 8 0.5% Before 6.4.4 6.4.4 June 18, 2024
CVE-2026-2576 High 7.5 0.4% 0 to 6.4.21 (inclusive) 6.4.22 February 18, 2026
CVE-2026-57326 High 7.2 0.3% 6.4.22 and earlier 6.4.23 June 29, 2026
CVE-2026-28004 High 7.2 0.2% 6.4.25 and earlier 6.4.26 August 12, 2026
CVE-2026-61959 Medium 6.4 0.2% 6.4.24 and earlier 6.4.25 July 28, 2026
CVE-2026-57328 Medium 6.4 0.2% 6.4.22 and earlier 6.4.23 June 29, 2026
CVE-2023-51516 Medium 5.4 0.3% 6.3.9 and earlier 6.3.10 December 27, 2023
CVE-2026-57339 Medium 5.3 0.3% 6.4.23 and earlier 6.4.24 June 29, 2026
CVE-2026-1656 Medium 5.3 0.3% 0 to 6.4.20 (inclusive) 6.4.21 February 18, 2026
CVE-2024-13887 Medium 5.3 0.3% 0 to 6.4.14 (inclusive) 6.4.15 March 13, 2025
CVE-2025-64630 Medium 4.3 0.3% 6.4.19 and earlier 6.4.20 December 15, 2025
CVE-2025-67596 Medium 4.3 0.1% 6.4.19 and earlier 6.4.20 December 3, 2025
CVE-2025-64219 Medium 4.3 0.2% 6.4.18 and earlier 6.4.19 October 19, 2025

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.