Skip to content

Wpdirectorykit vulnerabilities

Products

Newest

wpdirectorykit wp directory kit WP Directory Kit <= 1.6.0 - Unauthenticated SQL Injection via 'idfield' Parameter CVE-2026-109197 7.5 HighOctober 31, 2026
wpdirectorykit wp directory kit WP Directory Kit <= 1.5.9 - Authenticated (Subscriber+) SQL Injection via 'display_name' Profile Field (Second-Order) CVE-2026-96653 6.5 MediumOctober 10, 2026
wpdirectorykit wp directory kit WP Directory Kit <= 1.5.4 - Authenticated (Custom+) SQL Injection via 'data_fields_list' Parameter CVE-2026-16596 6.5 MediumSeptember 30, 2026
unknown wp directory kit WP Directory Kit < 1.5.8 - Listing Admin+ Stored XSS via Category and Location Title and Icon Fields CVE-2026-16591 7.2 HighSeptember 26, 2026
wpdirectorykit wp directory kit WP Directory Kit <= 1.5.4 - Authenticated (Custom+) SQL Injection via 'order_by' Parameter CVE-2026-16588 6.5 MediumSeptember 16, 2026
unknown wp directory kit WP Directory Kit <= 1.5.7 - Unauthenticated Unpublished Listing Disclosure via map_infowindow CVE-2026-18232 5.3 MediumSeptember 15, 2026
unknown wp directory kit WP Directory Kit <= 1.5.7 - Editor+ SQL Injection via Elementor Category and Location Widget Settings CVE-2026-16593 6.8 MediumSeptember 15, 2026
unknown wp directory kit WP Directory Kit <= 1.5.7 - Contributor+ Non-Public Listing Field Disclosure via Shortcodes CVE-2026-16592 2.7 LowSeptember 15, 2026
unknown wp directory kit WP Directory Kit < 1.5.7 - Unauthenticated User Email Disclosure via select_2_ajax_user CVE-2026-18231 5.3 MediumAugust 19, 2026
unknown wp directory kit WP Directory Kit < 1.5.7 - Admin+ SQL Injection via section Parameter CVE-2026-18653 7.2 HighAugust 16, 2026
wpdirectorykit wp directory kit WordPress WP Directory Kit plugin <= 1.5.4 - SQL Injection vulnerability CVE-2026-28001 Public exploit 9.3 CriticalAugust 13, 2026
wpdirectorykit wp directory kit WordPress WP Directory Kit plugin <= 1.5.4 - SQL Injection vulnerability CVE-2026-27538 7.5 HighAugust 13, 2026
unknown wp directory kit WP Directory Kit < 1.5.6 - Unauthenticated SQL Injection via search_location and search_category CVE-2026-18474 8.6 HighAugust 12, 2026
unknown wp directory kit WP Directory Kit < 1.5.6 - Subscriber+ SQL Injection via section Parameter CVE-2026-18230 8.1 HighAugust 12, 2026
unknown wp directory kit WP Directory Kit < 1.5.5 - Unauthenticated SQL Injection via 'field_search' Parameter CVE-2026-18473 9.1 CriticalAugust 9, 2026
unknown wp directory kit WP Directory Kit < 1.5.5 - Subscriber+ User and Unpublished Listing Disclosure CVE-2026-16595 6.5 MediumAugust 8, 2026
unknown wp directory kit WP Directory Kit < 1.5.5 - Subscriber+ Plugin Settings and API Key Disclosure CVE-2026-16594 7.5 HighAugust 8, 2026
unknown wp directory kit WP Directory Kit < 1.5.5 - Subscriber+ Contact Message and User Data Disclosure CVE-2026-16590 6.5 MediumAugust 8, 2026
unknown wp directory kit WP Directory Kit < 1.5.5 - Subscriber+ SQL Injection via data_fields_list Parameter CVE-2026-16589 7.7 HighAugust 8, 2026
wp directory kit directory kit, wpdirectorykit wp directory kit +1 more WordPress WP Directory Kit plugin <= 1.5.0 - Broken Access Control vulnerability CVE-2026-39534 7.5 HighJune 15, 2026
wp directory kit directory kit, wpdirectorykit wp directory kit +1 more WordPress WP Directory Kit plugin <= 1.5.1 - SQL Injection vulnerability CVE-2026-42672 9.3 CriticalJune 1, 2026
wp directory kit directory kit, wpdirectorykit wp directory kit +1 more WordPress WP Directory Kit plugin <= 1.5.0 - SQL Injection vulnerability CVE-2026-39531 9.3 CriticalMay 21, 2026
wpdirectorykit wp directory kit WP Directory Kit <= 1.4.9 - Unauthenticated Email Exposure via wdk_public_action CVE-2025-13920 5.3 MediumJanuary 24, 2026
listingthemes sweet energy efficiency Sweet Energy Efficiency <= 1.0.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Graph Deletion CVE-2025-14618 4.3 MediumDecember 18, 2025
wpdirectorykit wp directory kit WP Directory Kit <= 1.4.7 - Unauthenticated SQL Injection CVE-2025-13089 7.5 HighDecember 13, 2025
listingthemes wp directory kit WP Directory Kit <= 1.4.4 - Authentication Bypass to Privilege Escalation via Account Takeover CVE-2025-13390 Public exploit 10.0 CriticalDecember 3, 2025
wpdirectorykit wp directory kit WP Directory Kit <= 1.4.6 - Authenticated (Admin+) SQL Injection CVE-2025-13090 4.9 MediumDecember 2, 2025
wpdirectorykit wp directory kit WP Directory Kit <= 1.4.5 - Reflected Cross-Site Scripting via 'order_by' Parameter CVE-2025-13525 6.1 MediumNovember 27, 2025
wpdirectorykit wp directory kit WP Directory Kit <= 1.4.3 - Unauthenticated SQL Injection via select_2_ajax() Function CVE-2025-13138 7.5 HighNovember 21, 2025
wpdirectorykit wp directory kit WordPress WP Directory Kit plugin <= 1.4.0 - Broken Access Control vulnerability CVE-2025-60120 5.3 MediumSeptember 26, 2025
listingthemes sweet energy efficiency WordPress Sweet Energy Efficiency plugin <= 1.0.8 - Cross Site Request Forgery (CSRF) vulnerability CVE-2025-58262 7.1 HighSeptember 22, 2025
wpdirectorykit wp directory kit WordPress WP Directory Kit plugin <= 1.2.6 - Broken Access Control vulnerability CVE-2023-41875 5.3 MediumDecember 13, 2024
wpdirectorykit wp directory kit WordPress WP Directory Kit plugin <= 1.3.5 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2024-37487 7.1 HighJuly 21, 2024
wpdirectorykit wp directory kit WordPress WPDirectoryKit plugin <= 1.3.6 - HTML Injection vulnerability CVE-2024-37253 2.7 LowJuly 9, 2024
listingthemes wp directory kit WP Directory Kit <= 1.3.0 - Authenticated (Subscriber+) SQL Injection CVE-2024-3217 Public exploit 8.8 HighApril 5, 2024
wpdirectorykit wp directory kit WordPress WP Directory Kit plugin <= 1.2.9 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2024-29774 7.1 HighMarch 27, 2024
wp directory kit directory kit, wpdirectorykit wp directory kit +1 more WordPress WP Directory Kit Plugin <= 1.1.9 is vulnerable to Open Redirection CVE-2023-31229 4.7 MediumDecember 29, 2023
wpdirectorykit wp directory kit WP Directory Kit <= 1.2.1 - Cross-Site Request Forgery to Plugin Settings Change/Delete, Demo Import, Directory Kit Modification/Deletion via admin_page_display CVE-2023-2279 5.4 MediumAugust 31, 2023
wpdirectorykit wp directory kit WP Directory Kit <= 1.1.9 - Unauthenticated Local File Inclusion via wdk_public_action CVE-2023-2278 9.8 CriticalJune 13, 2023
wpdirectorykit wp directory kit WP Directory Kit <= 1.2.3 - Missing Authorization to Plugin Settings Change/Delete, Demo Import, Directory Kit Deletion via wdk_admin_action CVE-2023-2351 6.5 MediumJune 13, 2023
wpdirectorykit wp directory kit WP Directory Kit <= 1.1.9 - Cross-Site Request Forgery to Stored Cross-Site Scripting via wdk_resultitem CVE-2023-2277 6.1 MediumJune 13, 2023
wpdirectorykit wp directory kit WP Directory Kit <= 1.2.2 - Missing Authorization to Plugin Installation, Settings Change/Delete, Demo Import, Directory Kit Deletion via wdk_public_action CVE-2023-2280 6.5 MediumJune 9, 2023
wpdirectorykit wp directory kit WP Directory Kit <= 1.2.3 - Reflected Cross-Site Scripting via 'search' CVE-2023-2835 6.1 MediumJune 2, 2023