Path Traversal Vulnerability in CMSJunkie - WP-BusinessDirectory Plugin
CVE-2025-32629

8.6HIGH

Key Information:

Vendor

WordPress
Status
WP-businessdirectory
Vendor
CVE Published:
11 April 2025

What is CVE-2025-32629?

A Path Traversal vulnerability exists in the CMSJunkie WP-BusinessDirectory plugin that enables attackers to bypass directory restrictions. This flaw can allow unauthorized access to the file system, potentially leading to arbitrary file deletion and other serious security implications. It is essential for users of the WP-BusinessDirectory plugin, specifically versions up to and including 3.1.2, to take immediate action to mitigate the risks posed by this vulnerability.

Affected Version(s)

WP-BusinessDirectory <= 3.1.2

References

https://patchstack.com/database/wordpress/plugin/wp-busin...
vdb-entry

CVSS V3.1

Score:
8.6
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

LVT-tholv2k (Patchstack Alliance)
.