CVE-2026-66649

creationtimestamp| type| source ---|---|--- 2026-08-20 13:40:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtjeo5njyo2t 2026-08-20 14:08:20+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtjgapffbo2p...

CVE-2026-66649

Unauthenticated SQL Injection in Directory Pro = 2.5.8 versions...

CVE-2026-66649 WordPress Directory Pro plugin <= 2.5.8 - SQL Injection vulnerability

Unauthenticated SQL Injection in Directory Pro = 2.5.8 versions...

CVE-2026-66649

The WordPress Directory Pro plugin (versions ≤ 2.5.8) has an unauthenticated SQL injection vulnerability exploitable over the network with low complexity, scoring 9.3 critical. Patchstack advises upgrading to a patched version; no in-the-wild exploitation details are provided in the documents.