Security
فارسی
All products

wpdirectorykit

WordPress · Plugin
41 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
WP Directory Kit <= 1.6.0 - Unauthenticated SQL Injection via 'idfield' ParameterCVE-2026-109197 wpdirectorykit WordPress High Fix reported
Directory Kit <= 1.6.0 - Unauthenticated Information ExposureCVE-2026-18232 wpdirectorykit WordPress Medium No fix reported
Directory Kit <= 1.6.0 - Authenticated (Contributor+) Information ExposureCVE-2026-16592 wpdirectorykit WordPress Medium Fix reported
Directory Kit <= 1.5.8 - Authenticated (Editor+) SQL InjectionCVE-2026-16593 wpdirectorykit WordPress Medium Fix reported
WP Directory Kit <= 1.5.9 - Authenticated (Subscriber+) SQL Injection via 'display_name' Profile Field (Second-Order)CVE-2026-96653 wpdirectorykit WordPress Medium Fix reported
Directory Kit <= 1.5.7 - Authenticated (Listing Admin+) Stored Cross-Site ScriptingCVE-2026-16591 wpdirectorykit WordPress Medium Fix reported
WP Directory Kit <= 1.5.4 - Authenticated (Custom+) SQL Injection via 'data_fields_list' ParameterCVE-2026-16596 wpdirectorykit WordPress Medium Fix reported
WP Directory Kit <= 1.5.4 - Authenticated (Custom+) SQL Injection via 'order_by' ParameterCVE-2026-16588 wpdirectorykit WordPress Medium Fix reported
WP Directory Kit < 1.5.7 - Authenticated (Administrator+) SQL InjectionCVE-2026-18653 wpdirectorykit WordPress Medium Fix reported
WP Directory Kit < 1.5.7 - Unauthenticated Information ExposureCVE-2026-18231 wpdirectorykit WordPress Medium Fix reported
Directory Kit <= 1.5.4 - Information Exposure to Authenticated (Subscriber+) User and Unpublished Listing DisclosureCVE-2026-16595 wpdirectorykit WordPress Medium Fix reported
Directory Kit <= 1.5.4 - Authenticated (Subscriber+) Plugin Settings and API Key DisclosureCVE-2026-16594 wpdirectorykit WordPress Medium Fix reported
Directory Kit <= 1.5.4 - Authenticated (Subscriber+) Contact Message and User Data DisclosureCVE-2026-16590 wpdirectorykit WordPress Medium Fix reported
Directory Kit <= 1.5.4 - Unauthenticated SQL InjectionCVE-2026-28001 wpdirectorykit WordPress High Fix reported
Directory Kit <= 1.5.5 - Unauthenticated SQL InjectionCVE-2026-18474 wpdirectorykit WordPress High Fix reported
Directory Kit <= 1.5.4 - Unauthenticated SQL InjectionCVE-2026-18473 wpdirectorykit WordPress High Fix reported
Directory Kit <= 1.5.5 - Authenticated (Subscriber+) SQL InjectionCVE-2026-18230 wpdirectorykit WordPress Medium Fix reported
Directory Kit <= 1.5.4 - Authenticated (Subscriber+) SQL InjectionCVE-2026-16589 wpdirectorykit WordPress Medium Fix reported
WP Directory Kit <= 1.5.4 - Unauthenticated SQL InjectionCVE-2026-27538 wpdirectorykit WordPress Medium Fix reported
WP Directory Kit <= 1.5.1 - Unauthenticated SQL InjectionCVE-2026-42672 wpdirectorykit WordPress High Fix reported