CVE-2026-16594

The WP Directory Kit WordPress plugin (versions before 1.5.5 ) contains a vulnerability where it fails to perform authorization or nonce checks on one of its authenticated AJAX actions . This flaw allows any authenticated user, including those with low-level Subscriber privileges, to disclose the...