A Subscriber Cross Site Scripting (XSS) vulnerability exists in the Business Directory plugin up to version 6.4.24. The CVE record was published on 2026-08-06T15:16:57.020Z. The vulnerability has a CVSS score of 6.5 and is classified as MEDIUM severity. The affected product is Business Directory plugin. The likely operational impact of this vulnerability is that an attacker could inject malicious scripts [truncated]
CVE-2026-59550 is a critical Unauthenticated SQL Injection vulnerability in AWP Classifieds plugin versions up to 4.4.7. The vulnerability has a CVSS score of 9.3 and CVSS severity of CRITICAL. The vulnerability allows unauthenticated attackers to inject malicious SQL code, potentially leading to data breaches and other security issues. Administrators and users of AWP Classifieds plugin version 4.4.7 or e [truncated]
