WP-BusinessDirectory – Business directory plugin for WordPress Security & Risk Analysis

The wp-businessdirectory plugin version 4.0.1 presents a significant security risk due to a combination of poor coding practices, a history of critical vulnerabilities, and an exposed attack surface. While the use of prepared statements for SQL queries is a positive sign, this is heavily overshadowed by the extremely low percentage of properly escaped output (1%), indicating a high likelihood of Cross-Site Scripting (XSS) vulnerabilities. The presence of unsanitized paths in all analyzed taint flows (12 out of 12) is a critical concern, particularly with 3 of these being rated as high severity. Furthermore, the single unprotected AJAX handler represents a direct entry point for attackers without any authentication or authorization checks. The plugin's vulnerability history, including a recent critical CVE and a pattern of SQL injection, XSS, and path traversal issues, suggests a persistent lack of security diligence. While the plugin exhibits some good practices like using prepared statements and capability checks, these are insufficient to mitigate the identified risks. The overall security posture is weak and requires immediate attention.