CVE-2026-39591 — WordPress WP-BusinessDirectory plugin <= 4.0.0 - Arbitrary File Upload vulnerability

CVE-2026-39591

WordPress WP-BusinessDirectory plugin <= 4.0.0 - Arbitrary File Upload vulnerability PUBLISHED

Description (CNA)

Subscriber Arbitrary File Upload in WP-BusinessDirectory <= 4.0.0 versions.

Vendor / product	Versions
CMSJunkie – WordPress Business Directory Plugins / WP-BusinessDirectory	affected n/a through 4.0.0

CWE-434

CISA-ADP

No English description supplied.

No references supplied.