Wpdirectorykit Wp Directory Kit vulnerabilities

• listingthemes wp directory kit WP Directory Kit <= 1.4.4 - Authentication Bypass to Privilege Escalation via Account Takeover CVE-2025-13390 Public exploit 10.0 CriticalDecember 3, 2025
• wpdirectorykit wp directory kit WordPress WP Directory Kit plugin <= 1.2.6 - Broken Access Control vulnerability CVE-2023-41875 5.3 MediumDecember 13, 2024
• wpdirectorykit wp directory kit WordPress WP Directory Kit plugin <= 1.3.5 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2024-37487 7.1 HighJuly 21, 2024
• wpdirectorykit wp directory kit WordPress WPDirectoryKit plugin <= 1.3.6 - HTML Injection vulnerability CVE-2024-37253 2.7 LowJuly 9, 2024
• listingthemes wp directory kit WP Directory Kit <= 1.3.0 - Authenticated (Subscriber+) SQL Injection CVE-2024-3217 Public exploit 8.8 HighApril 5, 2024
• wpdirectorykit wp directory kit WordPress WP Directory Kit plugin <= 1.2.9 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2024-29774 7.1 HighMarch 27, 2024
• wp directory kit directory kit, wpdirectorykit wp directory kit +1 more WordPress WP Directory Kit Plugin <= 1.1.9 is vulnerable to Open Redirection CVE-2023-31229 4.7 MediumDecember 29, 2023
• wpdirectorykit wp directory kit WP Directory Kit <= 1.2.1 - Cross-Site Request Forgery to Plugin Settings Change/Delete, Demo Import, Directory Kit Modification/Deletion via admin_page_display CVE-2023-2279 5.4 MediumAugust 31, 2023
• wpdirectorykit wp directory kit WP Directory Kit <= 1.1.9 - Unauthenticated Local File Inclusion via wdk_public_action CVE-2023-2278 9.8 CriticalJune 13, 2023
• wpdirectorykit wp directory kit WP Directory Kit <= 1.2.3 - Missing Authorization to Plugin Settings Change/Delete, Demo Import, Directory Kit Deletion via wdk_admin_action CVE-2023-2351 6.5 MediumJune 13, 2023
• wpdirectorykit wp directory kit WP Directory Kit <= 1.1.9 - Cross-Site Request Forgery to Stored Cross-Site Scripting via wdk_resultitem CVE-2023-2277 6.1 MediumJune 13, 2023
• wpdirectorykit wp directory kit WP Directory Kit <= 1.2.2 - Missing Authorization to Plugin Installation, Settings Change/Delete, Demo Import, Directory Kit Deletion via wdk_public_action CVE-2023-2280 6.5 MediumJune 9, 2023
• wpdirectorykit wp directory kit WP Directory Kit <= 1.2.3 - Reflected Cross-Site Scripting via 'search' CVE-2023-2835 6.1 MediumJune 2, 2023