CVE-2026-16592

The WP Directory Kit WordPress plugin (through 1.5.7 ) fails to check authorization or listing visibility in one of its shortcodes. This allows users with a Contributor role or higher to disclose non-public listing content , including password-protected and hidden fields, belonging to other users...