Input validation vulnerability in Business Directory Plugin – Easy Listing Directories for WordPress 6.4.2

The Business Directory Plugin for WordPress is at risk of a type of cyber attack called time-based SQL Injection. This can happen because the plugin does not properly protect against a user entering harmful code in the ‘listingfields’ parameter. As a result, attackers who are not logged in can add their own code to the plugin’s code, which can then be used to access private information from the website’s database.