Unknown Wp Directory Kit vulnerabilities

• unknown wp directory kit WP Directory Kit < 1.5.8 - Listing Admin+ Stored XSS via Category and Location Title and Icon Fields CVE-2026-16591 7.2 HighSeptember 26, 2026
• unknown wp directory kit WP Directory Kit <= 1.5.7 - Unauthenticated Unpublished Listing Disclosure via map_infowindow CVE-2026-18232 5.3 MediumSeptember 15, 2026
• unknown wp directory kit WP Directory Kit <= 1.5.7 - Editor+ SQL Injection via Elementor Category and Location Widget Settings CVE-2026-16593 6.8 MediumSeptember 15, 2026
• unknown wp directory kit WP Directory Kit <= 1.5.7 - Contributor+ Non-Public Listing Field Disclosure via Shortcodes CVE-2026-16592 2.7 LowSeptember 15, 2026
• unknown wp directory kit WP Directory Kit < 1.5.7 - Unauthenticated User Email Disclosure via select_2_ajax_user CVE-2026-18231 5.3 MediumAugust 19, 2026
• unknown wp directory kit WP Directory Kit < 1.5.7 - Admin+ SQL Injection via section Parameter CVE-2026-18653 7.2 HighAugust 16, 2026
• unknown wp directory kit WP Directory Kit < 1.5.6 - Unauthenticated SQL Injection via search_location and search_category CVE-2026-18474 8.6 HighAugust 12, 2026
• unknown wp directory kit WP Directory Kit < 1.5.6 - Subscriber+ SQL Injection via section Parameter CVE-2026-18230 8.1 HighAugust 12, 2026
• unknown wp directory kit WP Directory Kit < 1.5.5 - Unauthenticated SQL Injection via 'field_search' Parameter CVE-2026-18473 9.1 CriticalAugust 9, 2026
• unknown wp directory kit WP Directory Kit < 1.5.5 - Subscriber+ User and Unpublished Listing Disclosure CVE-2026-16595 6.5 MediumAugust 8, 2026
• unknown wp directory kit WP Directory Kit < 1.5.5 - Subscriber+ Plugin Settings and API Key Disclosure CVE-2026-16594 7.5 HighAugust 8, 2026
• unknown wp directory kit WP Directory Kit < 1.5.5 - Subscriber+ Contact Message and User Data Disclosure CVE-2026-16590 6.5 MediumAugust 8, 2026
• unknown wp directory kit WP Directory Kit < 1.5.5 - Subscriber+ SQL Injection via data_fields_list Parameter CVE-2026-16589 7.7 HighAugust 8, 2026