CVE-2024-3217

🗓️ 05 Apr 2024 07:34:35Reported by WordfenceType

cve🔗 web.nvd.nist.gov👁 66 Views🌐 WEB

Vulnerability in WP Directory Kit Plugin for WordPress

Reporter	Title	Published	Views	Family All 10
GithubExploit	Exploit for SQL Injection in Wpdirectorykit Wp_Directory_Kit	17 Apr 202413:43	–	githubexploit
CNNVD	WordPress Plugin WP Directory Kit 安全漏洞	5 Apr 202400:00	–	cnnvd
Cvelist	CVE-2024-3217 WP Directory Kit <= 1.3.0 - Authenticated (Subscriber+) SQL Injection	5 Apr 202407:34	–	cvelist
NVD	CVE-2024-3217	5 Apr 202408:15	–	nvd
Patchstack	WordPress WP Directory Kit plugin <= 1.3.0 - Authenticated (Subscriber+) SQL Injection vulnerability	5 Apr 202400:51	–	patchstack
Patchstack	WordPress WP Directory Kit Plugin <= 1.3.0 is vulnerable to SQL Injection	5 Apr 202400:00	–	patchstack
RedhatCVE	CVE-2024-3217	5 Feb 202510:08	–	redhatcve
Vulnrichment	CVE-2024-3217 WP Directory Kit <= 1.3.0 - Authenticated (Subscriber+) SQL Injection	5 Apr 202407:34	–	vulnrichment
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (April 1, 2024 to April 7, 2024)	11 Apr 202417:23	–	wordfence
WPVulnDB	WP Directory Kit < 1.3.1 - Authenticated (Subscriber+) SQL Injection	4 Apr 202400:00	–	wpvulndb

NVD

Vulners

Vulnrichment

Node

wpdirectorykit wp_directory_kitRange<1.3.1wordpress

[
  {
    "vendor": "wpdirectorykit",
    "product": "WP Directory Kit",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "1.3.0",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/09b315e6-d973-467d-8b8d-4b7b4a7ca3f8
plugins	www.plugins.trac.wordpress.org/changeset/3064842/wpdirectorykit/trunk/application/controllers/Wdk_frontendajax.php
plugins	www.plugins.trac.wordpress.org/browser/wpdirectorykit/trunk/application/controllers/Wdk_frontendajax.php

Parameter	Position	Path	Description	CWE
attribute_id	request body	wordpress/wp-admin/admin-ajax.php	SQL injection vulnerability in WP Directory Kit via attribute_id/attribute_value in admin-ajax AJAX endpoint	CWE-89
attribute_value	request body	wordpress/wp-admin/admin-ajax.php	SQL injection vulnerability in WP Directory Kit via attribute_id/attribute_value in admin-ajax AJAX endpoint	CWE-89

08 Apr 2026 17:18Current

9.2High risk

Vulners AI Score9.2

CVSS 3.18.8

EPSS0.5293

SSVC

CWE-89