Skip to content
Founder-led WordPress incident response and care Request an assessment
3zerodigital Request a Website Assessment

Plugin security history

Chamber Dashboard Business Directory Vulnerability History & Security Timeline

The Wordfence Intelligence dataset currently contains 5 vulnerability records associated with Chamber Dashboard Business Directory, published between 2020 and 2025.

Dataset last synchronized: 2026-08-03 00:31:25 UTC

At a glance

Security Snapshot

5Total records
0Critical
0High
5Medium
0Low
0Informational
3Patched records
2Currently marked unpatched
2020-08-31First disclosure
2025-11-24Latest disclosure
5 of 5CVE coverage

Year-by-Year Timeline

YearRecordsRelative volume
202011 records
202544 records

Severity Breakdown

SeverityRecordsShare
Medium5100%

Vulnerability-Type Breakdown

Cross-Site Scripting

3 records60%

First: 2020. Latest: 2025.

Missing Authorization

2 records40%

First: 2025. Latest: 2025.

Patch Status

Patched
3
Currently marked unpatched
2
Unknown status
0

Patch status reflects the latest successfully synchronized source dataset and must be checked against the installed version.

Latest Known Patched Versions

  • 3.3.11
  • 3.3.10
  • 3.3.1

Affected-Version History

Ranges are deduplicated by source range record and shown with the associated disclosure and known patched versions.

Affected rangeVulnerabilityPublishedPatched versionSeverity
*-3.3.11Chamber Dashboard Business Directory <= 3.3.11 - Missing Authorization to Unauthenticated Business Information ExportNovember 24, 2025Not suppliedMedium
*-3.3.11Chamber Dashboard Business Directory <= 3.3.11 - Authenticated (Contributor+) Stored Cross-Site ScriptingApril 4, 2025Not suppliedMedium
*-3.3.10Chamber Dashboard Business Directory <= 3.3.10 - Missing AuthorizationJanuary 16, 20253.3.11Medium
*-3.3.8Chamber Dashboard Business Directory <= 3.3.8 - Authenticated (Contributor+) Stored Cross-Site ScriptingJanuary 15, 20253.3.10Medium
[*, 3.3.1)Chamber Dashboard Business Directory < 3.3.1 - Cross-Site ScriptingAugust 31, 20203.3.1Medium

Selected source records

Latest Records

MediumCVE-2025-13414

Chamber Dashboard Business Directory <= 3.3.11 - Missing Authorization to Unauthenticated Business Information Export

Published: November 24, 2025

Affected versions
*-3.3.11
Patched versions
Not supplied
Original Wordfence record
MediumCVE-2025-32162

Chamber Dashboard Business Directory <= 3.3.11 - Authenticated (Contributor+) Stored Cross-Site Scripting

Published: April 4, 2025

Affected versions
*-3.3.11
Patched versions
Not supplied
Original Wordfence record
MediumCVE-2025-23917

Chamber Dashboard Business Directory <= 3.3.10 - Missing Authorization

Published: January 16, 2025

Affected versions
*-3.3.10
Patched versions
3.3.11
Original Wordfence record
MediumCVE-2024-11452

Chamber Dashboard Business Directory <= 3.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting

Published: January 15, 2025

Affected versions
*-3.3.8
Patched versions
3.3.10
Original Wordfence record
MediumCVE-2020-24699

Chamber Dashboard Business Directory < 3.3.1 - Cross-Site Scripting

Published: August 31, 2020

Affected versions
[*, 3.3.1)
Patched versions
3.3.1
Original Wordfence record

Highest-Severity Records

MediumCVE-2024-11452

Chamber Dashboard Business Directory <= 3.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting

Published: January 15, 2025

Affected versions
*-3.3.8
Patched versions
3.3.10
Original Wordfence record
MediumCVE-2025-32162

Chamber Dashboard Business Directory <= 3.3.11 - Authenticated (Contributor+) Stored Cross-Site Scripting

Published: April 4, 2025

Affected versions
*-3.3.11
Patched versions
Not supplied
Original Wordfence record
MediumCVE-2020-24699

Chamber Dashboard Business Directory < 3.3.1 - Cross-Site Scripting

Published: August 31, 2020

Affected versions
[*, 3.3.1)
Patched versions
3.3.1
Original Wordfence record
MediumCVE-2025-13414

Chamber Dashboard Business Directory <= 3.3.11 - Missing Authorization to Unauthenticated Business Information Export

Published: November 24, 2025

Affected versions
*-3.3.11
Patched versions
Not supplied
Original Wordfence record
MediumCVE-2025-23917

Chamber Dashboard Business Directory <= 3.3.10 - Missing Authorization

Published: January 16, 2025

Affected versions
*-3.3.10
Patched versions
3.3.11
Original Wordfence record

Currently Marked Unpatched Records

MediumCVE-2025-13414

Chamber Dashboard Business Directory <= 3.3.11 - Missing Authorization to Unauthenticated Business Information Export

Published: November 24, 2025

Affected versions
*-3.3.11
Patched versions
Not supplied
Original Wordfence record
MediumCVE-2025-32162

Chamber Dashboard Business Directory <= 3.3.11 - Authenticated (Contributor+) Stored Cross-Site Scripting

Published: April 4, 2025

Affected versions
*-3.3.11
Patched versions
Not supplied
Original Wordfence record

View all associated vulnerabilities

Need help reviewing an exposed WordPress website?

Running an affected version does not prove that a website was compromised. Suspicious redirects, unknown administrators, injected content, unexpected files or recurring malware may require a manual investigation.

Vulnerability data: Wordfence Intelligence. Analysis and practical guidance: 3Zero Digital.

Data Source, Attribution and Methodology

This page aggregates active Production Feed records. Counts are not software-quality rankings, and an affected version does not prove exploitation or infection. Read the full methodology.

Return to the Security History Directory