CVE-2025-32630: WordPress WP-BusinessDirectory Plugin <= 3.1.2 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CMSJunkie - WordPress Business Directory Plugins WP-BusinessDirectory allows Reflected XSS. This issue affects WP-BusinessDirectory: from n/a through 3.1.2.
Other sources
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CMSJunkie - WordPress Business Directory Plugins WP-BusinessDirectory wp-businessdirectory allows Reflected XSS.This issue affects WP-BusinessDirectory: from n/a through <= 3.1.2.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-32630?
CVE-2025-32630 is classified as a moderate severity vulnerability due to its potential for reflected cross-site scripting (XSS) attacks.
How do I fix CVE-2025-32630?
To mitigate CVE-2025-32630, update the WP-BusinessDirectory plugin to the latest version beyond 3.1.2.
Which versions of WP-BusinessDirectory are affected by CVE-2025-32630?
CVE-2025-32630 affects WP-BusinessDirectory versions from n/a through 3.1.2.
What type of vulnerability is CVE-2025-32630?
CVE-2025-32630 is an improper neutralization of input during web page generation, allowing for cross-site scripting (XSS) attacks.
Can CVE-2025-32630 lead to data theft?
Yes, if exploited, CVE-2025-32630 can lead to data theft and unauthorized actions on behalf of users.