Description
该漏洞存在于 WordPress Business Directory 插件中，攻击者可以通过构造恶意的SQL查询，未授权访问或篡改数据库中的敏感信息，可能导致数据泄露、数据篡改或服务中断等严重后果。
WordPress Business Directory 插件 /business-directory SQL 注入漏洞（CVE-2024-4443）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2024-4443
https://github.com/truonghuuphuc/CVE-2024-4443-Poc
https://www.wordfence.com/threat-intel/vulnerabilities/id/982fb304-08d6-4195-97a3-f18e94295492
https://hackhalt.com/threat/cve-2024-4443/
https://s4e.io/tools/business-directory-plugin-sql-injection-cve-2024-4443
https://vulners.com/cve/CVE-2024-4443
https://plugins.trac.wordpress.org/changeset/3089626/