CVE-2026-18473

The WP Directory Kit WordPress plugin, in versions prior to 1.5.5 , is vulnerable to SQL injection because it fails to properly sanitize and escape a parameter before using it in a SQL statement. This flaw is exploitable by unauthenticated users via the 'field_search' parameter. While the vulnera...