These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
CVE-2026-39591 is a critical vulnerability in the WP-BusinessDirectory plugin for WordPress, allowing subscribers to upload arbitrary files. This issue affects versions up to 4.0.0 and has a CVSS score of 9.9.
A Cross-site Scripting (XSS) vulnerability exists in WP-BusinessDirectory, a WordPress plugin, affecting versions from n/a through 4.0.1. This issue allows for Reflected XSS attacks. Defenders should assess exposure and prioritize patching or mitigation efforts. The vulnerability arises from improper neutralization of input during web page generation, potentially leading to unauthorized actions or data ex [truncated]