CVE-2026-118420

The WP Directory Kit WordPress plugin before 1.6.3 does not sanitise and escape a parameter before using it in a SQL statement, making it possible for users holding the WP Directory Kit WordPress plugin before 1.6.3's custom Listing Admin role, and above, to perform SQL injection attacks...

CVE-2026-118420

The WP Directory Kit WordPress plugin, prior to version 1.6.3 , is vulnerable to SQL injection . The root cause is a failure to properly sanitize and escape a parameter before its use in a SQL statement. This vulnerability specifically affects users who possess the Listing Admin role or higher. W...

WordPress WP Directory Kit plugin < 1.6.3 - Listing Admin+ SQL Injection vulnerability

Listing Admin+ SQL Injection vulnerability discovered by anhdung1329 in WordPress Plugin WP Directory Kit versions 1.6.3...

EUVD-2026-123175

The WP Directory Kit WordPress plugin before 1.6.3 does not sanitise and escape a parameter before using it in a SQL statement, making it possible for users holding the WP Directory Kit WordPress plugin before 1.6.3's custom Listing Admin role, and above, to perform SQL injection attacks...

CVE-2026-118420 WP Directory Kit < 1.6.3 - Listing Admin+ SQL Injection via 'main_field' Parameter

The WP Directory Kit WordPress plugin before 1.6.3 does not sanitise and escape a parameter before using it in a SQL statement, making it possible for users holding the WP Directory Kit WordPress plugin before 1.6.3's custom Listing Admin role, and above, to perform SQL injection attacks...

WordPress WP Directory Kit plugin < 1.5.8 - Listing Admin+ Stored XSS vulnerability

Listing Admin+ Stored XSS vulnerability discovered by Yaswanth Reddy Sunkara in WordPress Plugin WP Directory Kit versions 1.5.8...

Exposure Of Information Through Directory Listing

@saltcorn/server is vulnerable to Exposure of Information Through Directory Listing. The vulnerability is due to missing validations of the builddirname parameter. This allows an attacker with admin permission to view files and directories on the filesystem...