WordPress security by component

DirectoryPress – Business Directory And Classified Ad Listing

Plugin description

DirectoryPress – Business Directory And Classified Ad Listing is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Apr 16, 2026; the highest CVE/CNA score is 7.5.

Plugin slug: directorypress-business-directory-and-classified-ad-listing

Latest vulnerability

CVE-2026-3489: DirectoryPress – Business Directory And Classified Ad Listing: SQL injection

DirectoryPress – Business Directory And Classified Ad Listing is affected by SQL injection. The vulnerable path is reachable without authentication. A successful request can alter database queries and expose or modify WordPress data. The published affected range is <= 3.6.26.

PublishedApr 16, 2026

Known safe version> 3.6.26

		Safe version
Apr 16, 2026	CVE-2026-3489 DirectoryPress – Business Directory And Classified Ad Listing: SQL injection DirectoryPress – Business Directory And Classified Ad Listing is affected by SQL injection. The vulnerable path is reachable without authentication. A successful request can alter database queries and expose or modify WordPress data. The published affected range is <= 3.6.26.	> 3.6.26	CVE7.5 NVDPending