Unauthorized Data Export Vulnerability in Chamber Dashboard Business Directory Plugin

CVE-2025-13414

What is CVE-2025-13414?

The Chamber Dashboard Business Directory plugin for WordPress contains a vulnerability that allows unauthorized data export due to a lack of a necessary capability check in the cdash_watch_for_export() function. This flaw presents an opportunity for unauthenticated attackers to gain access to sensitive business directory information, including details that could be detrimental to businesses and their clients. It is essential for users of this plugin to update to the latest version to mitigate this risk.

References