Directorypress Business Directory And Classified Ad Listing
Monthly
Unauthenticated SQL injection in the DirectoryPress - Business Directory And Classified Ad Listing WordPress plugin (versions ≤ 3.6.26) allows remote attackers to extract sensitive database information via the 'packages' parameter. Exploitation requires no user interaction or privileges, making it highly automatable. No active exploitation or public exploit code has been reported, and the EPSS probability is low (0.06%).
Unauthenticated SQL injection in the DirectoryPress - Business Directory And Classified Ad Listing WordPress plugin (versions ≤ 3.6.26) allows remote attackers to extract sensitive database information via the 'packages' parameter. Exploitation requires no user interaction or privileges, making it highly automatable. No active exploitation or public exploit code has been reported, and the EPSS probability is low (0.06%).