High severity7.2NVD Advisory· Published May 6, 2021· Updated Jun 17, 2026
CVE-2021-24248
CVE-2021-24248
Description
The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.1 did not properly check for imported files, forbidding certain extension via a blacklist approach, allowing administrator to import an archive with a .php4 inside for example, leading to RCE
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: <5.11.1
- Business Directory Team/Business Directory Plugin – Easy Listing Directories for WordPressv5Range: 5.11.1
Patches
Vulnerability mechanics
References
1- wpscan.com/vulnerability/ca886a34-cd2b-4032-9de1-8089b5cf3001nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.