Unauthorized Data Export Vulnerability in Chamber Dashboard Business Directory Plugin
CVE-2025-13414
Key Information:
- Vendor
WordPress
- Vendor
- CVE Published:
- 25 November 2025
What is CVE-2025-13414?
The Chamber Dashboard Business Directory plugin for WordPress contains a vulnerability that allows unauthorized data export due to a lack of a necessary capability check in the cdash_watch_for_export() function. This flaw presents an opportunity for unauthenticated attackers to gain access to sensitive business directory information, including details that could be detrimental to businesses and their clients. It is essential for users of this plugin to update to the latest version to mitigate this risk.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Chamber Dashboard Business Directory * <= 3.3.11
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved