Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The Business Directory Plugin – Easy Listing Directories for WordPress plugin for WordPress is vulnerable to time-based SQL Injection via the 'payment' parameter in all versions up to, and including, 6.4.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
⚡ New CVE Alert: CVE-2026-2576 📊 Severity: 7.5 🚨 Risk Level: High 🧩 Affects: Wordpress Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-2576 #CVE-2026-2576 #CVE #High #Wordpress #CyberSecurity #InfoSec https://t.co/kP5yMxm1dE
Post summary
A new WordPress vulnerability, CVE‑2026‑2576, is reported with a severity score of 7.5 and high risk level, but no further technical details or exploitation information are provided.
CVE-2026-2576 The Business Directory Plugin – Easy Listing Directories for WordPress plugin for WordPress is vulnerable to time-based SQL Injection via the 'payment' parameter in all… https://www.cve.org/CVERecord?id=CVE-2026-2576
Post summary
The CVE-2026-2576 entry indicates a time‑based SQL injection flaw in the Business Directory Plugin’s 'payment' parameter, but no proof‑of‑concept, exploit code, patch, or active exploitation details are included.