Input validation vulnerability in Business Directory Plugin – Easy Listing Directories for WordPress 6.3.10

The Business Directory Plugin is a plugin for WordPress which is vulnerable to Cross-Site Request Forgery in versions up to, and including, 6.3.10. This means that an attacker could send a link to a website administrator, and if the website administrator clicked it, the attacker would be able to perform unauthorized actions. This is happening because the plugin is missing or not correctly validating a security measure called a nonce on an unknown function.