CVE-2026-62097

The vulnerability in the WPTasty Business Directory plugin allows for Blind SQL Injection due to improper neutralization of special elements in SQL commands, potentially enabling attackers to manipulate database queries. This can lead to unauthorized data access or data leakage, posing a significant risk to the integrity and confidentiality of the affected systems. Organizations using versions of the Business Directory plugin up to 6.4.27 should prioritize immediate remediation to mitigate potential exploitation.