CVE-2026-118420

The WP Directory Kit WordPress plugin, prior to version 1.6.3 , is vulnerable to SQL injection . The root cause is a failure to properly sanitize and escape a parameter before its use in a SQL statement. This vulnerability specifically affects users who possess the Listing Admin role or higher. W...