Connections Pro

connections-pro

4 CVEs • 2 products

Products (2)

Click to collapse

Toggle

Connections Business Directory

connections_business_directory

CVEs (4)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2024-13926 1Connections Pro 1Wp Syntax Jun 17, 2026 Apr 19, 2025 N/A· v4 7.5 HIGH· v3 N/A· v2 The WP-Syntax WordPress plugin through 1.2 does not properly handle input, allowing an attacker to create a post containing a large number of tags, thereby exploiting a catastrophic backtracking issue in the regular expr...Show more The WP-Syntax WordPress plugin through 1.2 does not properly handle input, allowing an attacker to create a post containing a large number of tags, thereby exploiting a catastrophic backtracking issue in the regular expression processing to cause a DoS.Show less
CVE-2023-29437 1Connections Pro 1Connections Business Directory Jun 17, 2026 Jun 26, 2023 N/A· v4 5.4 MEDIUM· v3 N/A· v2 Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Steven A. Zahm Connections Business Directory plugin <= 10.4.36 versions.
CVE-2021-24794 1Connections Pro 1Connections Business Directory Jun 17, 2026 Nov 1, 2021 N/A· v4 4.8 MEDIUM· v3 3.5 LOW· v2 The Connections Business Directory WordPress plugin before 10.4.3 does not escape the Address settings when creating an Entry, which could allow high privilege users to perform Cross-Site Scripting when the unfiltered_ht...Show more The Connections Business Directory WordPress plugin before 10.4.3 does not escape the Address settings when creating an Entry, which could allow high privilege users to perform Cross-Site Scripting when the unfiltered_html capability is disallowed.Show less
CVE-2020-36503 1Connections Pro 1Connections Business Directory Jun 17, 2026 Nov 1, 2021 N/A· v4 8.0 HIGH· v3 6.0 MEDIUM· v2 The Connections Business Directory WordPress plugin before 9.7 does not validate or sanitise some connections' fields, which could lead to a CSV injection issue