PT-2025-48014 · WordPress · Chamber Dashboard Business Directory

Abhirup Konwar · Published 2025-11-25 · Updated 2025-11-25 · CVE-2025-13414

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Chamber Dashboard Business Directory plugin for WordPress versions through 3.3.11

Description The Chamber Dashboard Business Directory plugin for WordPress is susceptible to unauthorized data export. A missing capability check within the cdash watch for export() function allows unauthenticated attackers to export business directory information, potentially exposing sensitive business details.

Recommendations Update the Chamber Dashboard Business Directory plugin to a version newer than 3.3.11.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2025-13414

Affected Products

Chamber Dashboard Business Directory

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-13414 · Security Note
• https://wordfence.com/threat-intel/vulnerabilities/id/1896885a-a104-464a-bb57-2c3c73ff9415?source=cve · Note
• https://plugins.trac.wordpress.org/browser/chamber-dashboard-business-directory/trunk/options.php#L850 · Note
• https://twitter.com/CVEnew/status/1993225835902636353 · Twitter Post
• https://plugins.trac.wordpress.org/browser/chamber-dashboard-business-directory/tags/3.3.11/options.php#L850 · Note
• https://twitter.com/VulmonFeeds/status/1993266193910648937 · Twitter Post
• https://t.me/CVEtracker/38177 · Telegram Post