What’s Vulnerable › Products

Connections Business Directory vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your Connections Business Directory version is affected

Latest Connections Business Directory vulnerabilities

• CVE-2026-86789 — Connections Business Directory <= 10.4.67 - Unauthenticated Non-Public Directory Entry Disclosure via cn-api/v1 REST Routes (CVSS 5.3)
• CVE-2023-29437 — WordPress Connections Business Directory Plugin <= 10.4.36 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.4)
• CVE-2021-24794 — Connections Business Directory < 10.4.3 - Admin+ Stored Cross-Site Scripting (CVSS 4.8)
• CVE-2020-36503 — Connections Business Directory < 9.7 - Admin+ CSV Injection (CVSS 8.0)