CVE-2026-16592

CVE-2026-16592 affects the WP Directory Kit WordPress plugin through version 1.5.7 . The root cause is a missing authorization or listing visibility check in one of the plugin's shortcodes. This allows users with a role as low as Contributor to disclose non-public listing content belonging to oth...