A vulnerability was found in Business Directory Plugin Plugin up to 6.4.2/6.4.21 on WordPress and classified as critical. This impacts an unknown function. Such manipulation of the argument payment leads to sql injection.
This vulnerability is uniquely identified as CVE-2026-2576. The attack can be launched remotely. No exploit exists.
