CVE-2021-24249

Name of the Vulnerable Software and Affected Versions The Business Directory Plugin – Easy Listing Directories for WordPress versions prior to 5.11.2

Description The issue allows an attacker to perform a Cross-Site Request Forgery attack, enabling them to make a logged-in administrator export files. These files can then be downloaded by the attacker, potentially granting access to personally identifiable information (PII), such as email addresses and home addresses.

Recommendations For versions prior to 5.11.2, update to version 5.11.2 or later to resolve the issue.