Path Traversal Vulnerability in CMSJunkie - WP-BusinessDirectory Plugin

CVE-2025-32629

What is CVE-2025-32629?

A Path Traversal vulnerability exists in the CMSJunkie WP-BusinessDirectory plugin that enables attackers to bypass directory restrictions. This flaw can allow unauthorized access to the file system, potentially leading to arbitrary file deletion and other serious security implications. It is essential for users of the WP-BusinessDirectory plugin, specifically versions up to and including 3.1.2, to take immediate action to mitigate the risks posed by this vulnerability.

References